CVE-2020-2253

2020-09-1614:15:13

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

JSON

Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server.

CPENameOperatorVersion
email-ext-plugineqemail-ext-2.37.1
email-ext-plugineqemail-ext-2.22
email-ext-plugineqemail-ext-2.27
email-ext-plugineqemail-ext-2.44
email-ext-plugineqemail-ext-2.45
email-ext-plugineqemail-ext-2.61
email-ext-plugineqemail-ext-2.47
email-ext-plugineqemail-ext-2.74
email-ext-plugineqemail-ext-2.12
email-ext-plugineqemail-ext-2.54

Name	Operator	Version
email-ext-plugin	eq	email-ext-2.37.1
email-ext-plugin	eq	email-ext-2.22
email-ext-plugin	eq	email-ext-2.27
email-ext-plugin	eq	email-ext-2.44
email-ext-plugin	eq	email-ext-2.45
email-ext-plugin	eq	email-ext-2.61
email-ext-plugin	eq	email-ext-2.47
email-ext-plugin	eq	email-ext-2.74
email-ext-plugin	eq	email-ext-2.12
email-ext-plugin	eq	email-ext-2.54