A cross-site request forgery (CSRF) vulnerability in Jenkins Email Extension Plugin allows attackers to make another user stop watching an attacker-specified job.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NJenkins Email Extension
APPJenkins≤ 2.96
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
CI/CD
Powiązane podatności
CVE-2023-25765CRITICAL9.9ten sam produkt
In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Scri...
CVE-2019-1003032CRITICAL9.9ten sam produkt
A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml, src/main/...
CVE-2026-48920HIGH8.8ten sam produkt
Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email cont...
CVE-2020-2232HIGH7.5ten sam produkt
Jenkins Email Extension Plugin 2.72 and 2.73 transmits and displays the SMTP password in plain text as part of...
CVE-2023-32979MEDIUM4.3ten sam produkt
Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, a...