CVE-2023-49655

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-49655

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

A

cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system.

References
Link Resource
http://www.openwall.com/lists/oss-security/2023/11/29/1 Mailing List
https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3193 Issue Tracking Vendor Advisory
http://www.openwall.com/lists/oss-security/2023/11/29/1 Mailing List
https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3193 Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:matlab:*:*:*:*:*:jenkins:*:*
History

21 Nov 2024, 08:33

Type Values Removed Values Added
References () http://www.openwall.com/lists/oss-security/2023/11/29/1 - Mailing List () http://www.openwall.com/lists/oss-security/2023/11/29/1 - Mailing List
References () https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3193 - Issue Tracking, Vendor Advisory () https://www.jenkins.io/security/advisory/2023-11-29/#SECURITY-3193 - Issue Tracking, Vendor Advisory
Information

Published : 2023-11-29 14:15

Updated : 2024-11-21 08:33

NVD link : CVE-2023-49655

Mitre link : CVE-2023-49655

CVE.ORG link : CVE-2023-49655

JSON object : View

Products Affected

jenkins

CWE
CWE-352

Cross-Site Request Forgery (CSRF)