CVE-2023-49656

CRITICAL

Jenkins MATLAB Plugin < 2.11.1 - XML External Entity Injection

Title source: llm

Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Core 2

Core References

Mailing List

Issue Tracking, Vendor Advisory vendor-advisory

CVSS v3 9.8

EPSS 0.0084

EPSS Percentile 53.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-611

Status published

Products (2)

jenkins/matlab < 2.11.1

org.jenkins-ci.plugins/matlab 0 - 2.11.1Maven

Published Nov 29, 2023

Tracked Since Feb 18, 2026