CVE-2023-37960: Jenkins Mathworks Polyspace

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems.

Affected products

• Jenkins Mathworks Polyspace: up to and including 1.0.5

Published 2023-07-12. Last modified 2026-06-17.