← Back

Matlab

matlab

Vendor: Jenkins • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Jenkins
4Google Compute Engine
JiraMatlab+1 more
Nov 21, 2024
Nov 29, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified usernam...Show more
A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to connect to an attacker-specified hostname and port using attacker-specified username and password.Show less
1Jenkins
1Matlab
Nov 21, 2024
Nov 29, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
1Jenkins
1Matlab
Nov 21, 2024
Nov 29, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML file from the Jenkins controller file system.
1Jenkins
1Matlab
Nov 21, 2024
Nov 29, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system.