CVE-2023-37961

Summary

CVE-2023-37960 is a vulnerability affecting the Jenkins MathWorks Polyspace Plugin version 1.0.5 and earlier. This issue grants attackers with Item/Configure permissions the ability to send emails with arbitrary files sourced from the Jenkins controller file systems. This vulnerability poses a risk for potential data leakage or malware dissemination. Attackers can exploit this weakness to gain unauthorized access to sensitive information or install malicious software. System administrators are urged to update the plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.