Lucene search

K

Matlab Security Vulnerabilities

cve

Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system.

9.8CVSS

9.4AI Score

0.001EPSS

2023-11-29 02:15 PM

25

cve

A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system.

8.8CVSS

8.7AI Score

0.001EPSS

2023-11-29 02:15 PM

24

cve

Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

9.8CVSS

9.4AI Score

0.001EPSS

2023-11-29 02:15 PM

23

cve

A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password.

8.8CVSS

8.6AI Score

0.001EPSS

2023-11-29 02:15 PM

28