HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2020-2232

CVSS 7.5v3.1pub. 2020-08-12upd. 2024-11-21

Jenkins Email Extension Plugin 2.72 and 2.73 transmits and displays the SMTP password in plain text as part of the global Jenkins configuration form, potentially resulting in its exposure.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Jenkins Email Extension

    APP
    Jenkins
    2.722.73
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
CI/CD
CWE
References

Related vulnerabilities

CVE-2023-25765CRITICAL9.9ten sam produkt

In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Scri...

CVE-2019-1003032CRITICAL9.9ten sam produkt

A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml, src/main/...

CVE-2026-48920HIGH8.8ten sam produkt

Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email cont...

CVE-2023-32979MEDIUM4.3ten sam produkt

Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, a...

CVE-2023-32980MEDIUM4.3ten sam produkt

A cross-site request forgery (CSRF) vulnerability in Jenkins Email Extension Plugin allows attackers to make a...