Executive brief
Cross-site Scripting in Jenkins Email Extension Plugin
Affected products
- Maven org.jenkins-ci.plugins:email-ext
Junglewise Threat Intelligence
CVE-2023-25763: Cross-site Scripting in Jenkins Email Extension Plugin
CVE-2023-25763 · Severity: low · CVSS 3.1 · Published 2023-02-15
Technologies: org.jenkins-ci.plugins:email-ext (Maven). Vendors: Maven.
Related threats
- Jenkins Email Extension Plugin arbitrary file read via data-inline attribute
- Jenkins Email Extension Plugin Cross-Site Request Forgery vulnerability
- Jenkins Email Extension Plugin missing permission check
- Cross-site Scripting in Jenkins Email Extension Plugin
- Sandbox escape in Jenkins Email Extension Plugin