Input validation

2020-09-1614:15:00

PRIOn knowledge base

www.prio-n.com

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server.

CPENameOperatorVersion
email_extensionle2.75

CPE	Name	Operator	Version
	email_extension	le	2.75

References

www.openwall.com/lists/oss-security/2020/09/16/3

www.jenkins.io/security/advisory/2020-09-16/