org.jenkins-ci.plugins:mailer

3 results · Clear filters · Feed

• Medium 4.3
  CVE-2022-20613

  Cross-Site Request Forgery in Jenkins Mailer Plugin

  A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

  Jenkins Project Jenkins Mailer Plugin org.jenkins-ci.plugins:mailer Web / CMS Maven
  Jan 12, 2022
• Medium 4.3
  CVE-2022-20614

  Incorrect Permission Assignment for Critical Resource in Jenkins Mailer Plugin

  A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.

  Jenkins Project Jenkins Mailer Plugin org.jenkins-ci.plugins:mailer Web / CMS Maven
  Jan 12, 2022
• Medium 4.8
  CVE-2020-2252

  Improper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin

  Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.

  Jenkins Project Jenkins Mailer Plugin org.jenkins-ci.plugins:mailer Web / CMS Maven
  Sep 16, 2020