CVE-2023-49654

Publication date

2023-11-29 13:45:10

Family

jenkins

State

PUBLISHED

Description

Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins controller file system.