Skip to content
OpenAdvisories
Medium · 4.8 CVE-2020-2253 EUVD-2022-2432GHSA-4qrj-99r6-jfrh

Missing hostname validation in Email Extension Plugin

Published Sep 16, 2020 · Updated Aug 4, 2024 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Email Extension Plugin Package: org.jenkins-ci.plugins:email-ext Category: Web / CMS Ecosystem: Maven

Description

Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server.

Affected products

VendorProductAffectedFixed
Jenkins project Jenkins Email Extension Plugin unspecified – ≤ 2.75 2.69.1

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:email-ext < 2.76 2.76 GHSA-4qrj-99r6-jfrh

References