Skip to content
Sign in
Not rated

CVE-2023-49654 Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML…

Description

Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system.

Affected products and versions

Product Affected versions Fixed in
Jenkins MATLAB Plugin 2.11 earliest → 2.11.0 No fix stated

Other CVEs of Jenkins MATLAB Plugin

The 3 CVEs of Jenkins MATLAB Plugin →
CVE-2023-49656 Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks Not rated CVE-2023-49655 A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have… Not rated
Track this CVE