Mabl (Jenkins) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 38 known versions, newest CVE from 2023-07-12. Vendor: Jenkins.

CVEs of Mabl

• CVE-2023-37951 - CVSS 6.5 (medium), 2023-07-12: Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to…
• CVE-2023-37950 - CVSS 4.3 (medium), 2023-07-12: A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials…
• CVE-2023-37953 - CVSS 6.5 (medium), 2023-07-12: A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL…
• CVE-2023-37952 - CVSS 6.5 (medium), 2023-07-12: A cross-site request forgery (CSRF) vulnerability in Jenkins mabl Plugin 0.0.46 and earlier allows attackers to connect to an attacker-specified URL using…
• CVE-2019-10283 - CVSS 8.8 (high), 2019-04-04: Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read…