Jenkins Matlab Plugin (Jenkins Project) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-11-29. Vendor: Jenkins Project.

CVEs of Jenkins Matlab Plugin

• CVE-2023-49656 - CVSS 9.8 (critical), 2023-11-29: Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
• CVE-2023-49655 - CVSS 8.8 (high), 2023-11-29: A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the…
• CVE-2023-49654 - CVSS 9.8 (critical), 2023-11-29: Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system.