CVE-2023-37960

MediumCVSS 6.5

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.96%

57th percentile - higher than 57% of all known CVEs

Summary

The MathWorks Polyspace Plugin for Jenkins version 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems.

Risk Assessment

Attackers can exploit this vulnerability to send malicious files, potentially leading to data leakage or malicious actions within the organization.

Recommendation

It is recommended to update the plugin to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems.