{"id":"CVE-2013-6373","aliases":[],"url":"https://o3.security/vulnerability/CVE-2013-6373","summary":"Jenkins Exclusion Plugin allows Access to Resource Locks","details":"The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors.","published":"2022-05-17T03:51:00Z","modified":"2025-03-13T19:28:46.067343Z","cvss":null,"epss":{"score":0.01147,"percentile":0.64051,"asOf":"2026-08-29"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"org.jenkins-ci.plugins:exclusion","fixedVersion":"0.9"}],"fix":{"url":"https://github.com/jenkinsci/exclusion-plugin/commit/847f9aeb407c0f47046d184080c9e2c2e3720311","label":"jenkinsci/exclusion-plugin@847f9ae"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6373"},{"type":"WEB","url":"https://github.com/jenkinsci/exclusion-plugin/commit/847f9aeb407c0f47046d184080c9e2c2e3720311"},{"type":"PACKAGE","url":"https://github.com/jenkinsci/exclusion-plugin"},{"type":"WEB","url":"https://wiki.jenkins-ci.org/display/JENKINS/Exclusion-Plugin"},{"type":"WEB","url":"https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-03-13T19:28:46.067343Z"}}