CVE-2013-6373
jenkins-ci exclusion: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:exclusion 0.9.
The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins-ci:exclusion
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2q8v-439j-6p77 | Maven | org.jenkins-ci.plugins:exclusion | <0.9 | 0.9 |