GCVE - cpe:2.3:a:jenkins:mabl:*:*:*:*:*:jenkins:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jenkins:mabl:*:*:*:*:*:jenkins:*:*

part: a version: * update: *

Vendor	Jenkins (`d708d718-2e77-5ca3-ae9c-38ee4d256744`)
Product	Mabl (`7039107c-249c-5681-bafd-7cc1f8b4f626`)
Edition	*
Language	*
Software edition	*
Target software	jenkins
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-37953`	vulnerable	2026-06-08 06:08:16.577845	Details available A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Published: 2023-07-12T15:52:54.198Z Updated: 2024-11-07T14:59:22.720Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3127 http://www.openwall.com/lists/oss-security/2023/07/12/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37952`	vulnerable	2026-06-08 06:08:16.577469	Details available A cross-site request forgery (CSRF) vulnerability in Jenkins mabl Plugin 0.0.46 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins. Published: 2023-07-12T15:52:53.441Z Updated: 2024-11-07T15:00:08.180Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3127 http://www.openwall.com/lists/oss-security/2023/07/12/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37951`	vulnerable	2026-06-08 06:08:16.576919	Details available Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to. Published: 2023-07-12T15:52:52.705Z Updated: 2024-11-07T15:00:51.711Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3137%20(2) http://www.openwall.com/lists/oss-security/2023/07/12/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37950`	vulnerable	2026-06-08 06:08:16.576507	Details available A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Published: 2023-07-12T15:52:51.990Z Updated: 2024-11-06T19:44:35.437Z Open on db.gcve.eu Reference links https://www.jenkins.io/security/advisory/2023-07-12/#SECURITY-3137%20(1) http://www.openwall.com/lists/oss-security/2023/07/12/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10283`	vulnerable	2026-06-08 05:12:23.099529	Details available Jenkins mabl Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system. Published: 2019-04-04T15:38:49.000Z Updated: 2024-08-04T22:17:19.616Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/107790 http://www.openwall.com/lists/oss-security/2019/04/12/2 https://jenkins.io/security/advisory/2019-04-03/#SECURITY-946	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.