CVE-2023-37951

MediumCVSS 6.5

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.56%

42th percentile - higher than 42% of all known CVEs

Summary

The mabl plugin for Jenkins version 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access credentials they are not entitled to.

Risk Assessment

The organization may be exposed to unauthorized access to sensitive credentials, potentially leading to serious security breaches.

Recommendation

It is recommended to update the mabl plugin to the latest version to secure access to credentials.

Original NVD description (English source)

Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.