Jenkins MATLAB Plugin <=2.11.0 XXE in XML Parser Config
CVE-2023-49656 Published on November 29, 2023

Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Vendor Advisory NVD


Products Associated with CVE-2023-49656

Want to know whenever a new CVE is published for Jenkins Matlab? stack.watch will email you.

 

Affected Versions

Jenkins Project Jenkins MATLAB Plugin:

Exploit Probability

EPSS
0.04%
Percentile
9.82%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.