CVE-2023-49655 in MATLAB Plugin

Sumário

de MITRE • 29/11/2023

A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 28/11/2023
• Divulgação: 29/11/2023
• Moderação: aceite
• Entrada: VDB-246364
• CPE: pronto
• CWE: CWE-352 (confirmado)
• CVSS: 8.8 (NVD)
• EPSS: 0.00396
• KEV: não
• Atividades: muito baixo
• Sector: Telecommunication

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-49655
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-49655
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-49655/