CVE-2023-37951

—

CVSS 3.1

6.5 medium

EPSS

<1%p50

Published

Jul 12, 2023 (Jul 12, 2023)

Modified

Jun 17, 2026

Description

Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.

Vendors: jenkins
Products: mabl
Weakness: CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.