HIGH✓ PATCH🇬🇧 English

CVE-2020-2232

CVSS 7.5v3.1pub. 2020-08-12upd. 2024-11-21

Jenkins Email Extension Plugin 2.72 and 2.73 transmits and displays the SMTP password in plain text as part of the global Jenkins configuration form, potentially resulting in its exposure.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Jenkins Email Extension

    APP
    Jenkins
    2.722.73
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
CI/CD
CWE
Referencje

Powiązane podatności

CVE-2023-25765CRITICAL9.9ten sam produkt

In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Scri...

CVE-2019-1003032CRITICAL9.9ten sam produkt

A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml, src/main/...

CVE-2026-48920HIGH8.8ten sam produkt

Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email cont...

CVE-2023-32979MEDIUM4.3ten sam produkt

Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, a...

CVE-2023-32980MEDIUM4.3ten sam produkt

A cross-site request forgery (CSRF) vulnerability in Jenkins Email Extension Plugin allows attackers to make a...