High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-29	CVE-2023-49655	Cross-Site Request Forgery (CSRF) vulnerability in Jenkins Matlab 2.11.0 A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system. network low complexity jenkins CWE-352	8.8
2023-11-29	CVE-2023-49673	Cross-Site Request Forgery (CSRF) vulnerability in Jenkins products A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password. network low complexity jenkins CWE-352	8.8