PatchTheCVEmatlab vulnerabilities and fixes
Recent CVEs affecting matlab, with upgrade or downgrade steps. 5 tracked.
matlab has 5 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-11-29. Highest priority: CVE-2021-28967 (score 60/100).
- CVE-2023-49673 HIGH 8.8 UPGRADE UPGRADE A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and e
- CVE-2023-49656 CRITICAL 9.8 UPGRADE Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE
- CVE-2023-49655 HIGH 8.8 UPGRADE A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers
- CVE-2023-49654 CRITICAL 9.8 UPGRADE Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an
- CVE-2021-28967 CRITICAL 9.8 UPGRADE The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code
FAQ
How do I fix matlab vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is matlab being exploited right now?
None of the tracked matlab CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which matlab CVE should I patch first?
CVE-2021-28967 currently ranks highest (60/100): The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code.