CVE-2013-6373
Jenkins Exclusion Plugin allows Access to Resource Locks
EPSS 0.40%
Description
The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.
How to fix CVE-2013-6373
To remediate CVE-2013-6373, upgrade the affected package to a fixed version below.
- Maven/org.jenkins-ci.plugins:exclusion—upgrade to 0.9 or later
Is CVE-2013-6373 being exploited?
Low — EPSS is 0.4%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 0.9
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 4.0 | — | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N |