Executive brief
Missing hostname validation in Email Extension Plugin
Affected products
- Maven org.jenkins-ci.plugins:email-ext
Junglewise Threat Intelligence
CVE-2020-2253: Missing hostname validation in Email Extension Plugin
CVE-2020-2253 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: org.jenkins-ci.plugins:email-ext (Maven). Vendors: Maven.
Related threats
- Jenkins Email Extension Plugin arbitrary file read via data-inline attribute
- Jenkins Email Extension Plugin Cross-Site Request Forgery vulnerability
- Jenkins Email Extension Plugin missing permission check
- Cross-site Scripting in Jenkins Email Extension Plugin
- Cross-site Scripting in Jenkins Email Extension Plugin