Login Request a demo
MA
Product
Mabl
by Jenkins · last CVE Jul 12, 2023
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 1Medium 4Low 0
Severity
All severities5Critical0High1Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mabl to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-10283
8.8
2%
Apr 4
Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the…
Affected: All versions, or not specified
CVE-2023-37953
6.5
1%
Jul 12
A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified…
Affected: through 0.0.46
CVE-2023-37952
6.5
0%
Jul 12
A cross-site request forgery (CSRF) vulnerability in Jenkins mabl Plugin 0.0.46 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified…
Affected: through 0.0.46
CVE-2023-37951
6.5
1%
Jul 12
Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture…
Affected: through 0.0.46
CVE-2023-37950
4.3
1%
Jul 12
A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins
Affected: before 0.0.47
Showing 5