Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Email Extension Plugin — Jenkins Security Advisory 2023-05-16 Clear all filters
TI-2023-16168 CVE-2023-32980 · GHSA-2f89-66v2-9p53

Cross-site request forgery in Jenkins Email Extension Plugin

Priority LOW 20

A cross-site request forgery (CSRF) vulnerability in Jenkins Email Extension Plugin allows attackers to make another user stop watching an attacker-specified job.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00368 Published 2023-05-16 Fixed in 2.96.1, 2.89.0.2 CWE-352
TI-2023-16167 CVE-2023-32979 · GHSA-6gp4-2f92-j2w5

Incorrect permission assignment in Jenkins Email Extension Plugin

Priority LOW 21

Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files in the email-templates/ dir…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00503 Published 2023-05-16 Fixed in 2.96.1, 2.89.0.2 CWE-732