Vulnerabilities > Jenkins > Matlab

DATE CVE VULNERABILITY TITLE RISK
2023-11-29 CVE-2023-49654 Missing Authorization vulnerability in Jenkins Matlab
Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system.
network
low complexity
jenkins CWE-862
critical
9.8
2023-11-29 CVE-2023-49655 Cross-Site Request Forgery (CSRF) vulnerability in Jenkins Matlab
A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system.
network
low complexity
jenkins CWE-352
8.8
2023-11-29 CVE-2023-49656 XXE vulnerability in Jenkins Matlab
Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
network
low complexity
jenkins CWE-611
critical
9.8
2023-11-29 CVE-2023-49673 Cross-Site Request Forgery (CSRF) vulnerability in Jenkins products
A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password.
network
low complexity
jenkins CWE-352
8.8