EUVD-2023-2126

Malicious code in bioql PyPI...

Jenkins MathWorks Polyspace Plugin vulnerable to arbitrary file read

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier does not restrict the path of the attached files in Polyspace Notification post-build step. This allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file system...

CVE-2023-37960

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems...

CVE-2023-37960

Vulnerability CVE-2023-37960: Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier does not restrict the path of the attached files in Polyspace Notification post-build step, allowing attackers with Item/Configure permission to read arbitrary files from the Jenkins controller filesystem.