Skip to content
OpenAdvisories
High · 7.1 CVE-2023-49656 EUVD-2023-2913GHSA-82q9-88m2-4v68

Jenkins MATLAB Plugin XML External Entity vulnerability

Published Nov 29, 2023 · Updated Feb 13, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins MATLAB Plugin Package: org.jenkins-ci.plugins:matlab Category: Web / CMS Ecosystem: Maven

Description

Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins MATLAB Plugin ≤ 2.11.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:matlab < 2.11.1 2.11.1 GHSA-82q9-88m2-4v68

Advisories 1

References