CVE-2023-49655 in MATLAB Plugin

Resumen

por MITRE • 2023-11-29

A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 2023-11-28
• Divulgación: 2023-11-29
• Moderación: aceptado
• Artículo: VDB-246364
• CPE: listo
• CWE: CWE-352 (confirmado)
• CVSS: 8.8 (NVD)
• EPSS: 0.00396
• KEV: no
• Actividades: muy bajo
• Sector: Telecommunication

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-49655
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-49655
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-49655/