CVE-2013-6373: Jenkins-Ci Exclusion

Medium severity, CVSS 5.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.

Affected products

• Jenkins-Ci Exclusion: up to and including 0.8; version 0.6 only; version 0.7 only

Published 2013-11-25. Last modified 2026-06-17.