Executive brief
Emails were sent to addresses not associated with actual users of Jenkins by Email Extension Plugin
Affected products
- Maven org.jenkins-ci.plugins:email-ext
Junglewise Threat Intelligence
CVE-2017-2654: Emails were sent to addresses not associated with actual users of Jenkins by Email Extension Plugin
CVE-2017-2654 · Severity: low · CVSS 3 · Published 2022-05-13
Technologies: org.jenkins-ci.plugins:email-ext (Maven). Vendors: Maven.
Related threats
- Jenkins Email Extension Plugin arbitrary file read via data-inline attribute
- Jenkins Email Extension Plugin Cross-Site Request Forgery vulnerability
- Jenkins Email Extension Plugin missing permission check
- Cross-site Scripting in Jenkins Email Extension Plugin
- Cross-site Scripting in Jenkins Email Extension Plugin