Improper Validation

2023-05-3008:05:32

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

improper validation

read access

email-templates directory

jenkins email extension plugin

0.0005 Low

EPSS

Percentile

17.3%

JSON

Jenkins Email Extension Plugin is vulnerable to Improper Validation. The vulnerability exists due to lack of form validations which allows an attacker to gain read access to the email-templates/ file directory.

CPENameOperatorVersion
email extension pluginle2.96
email extension pluginle2.96
jenkins-2-pluginseq4.9.1667460322__1.el8
jenkins-2-pluginseq4.9.1674644684__1.el8
jenkins-2-pluginseq4.9.1642607680__1.el8
jenkins-2-pluginseq4.8.1642609156__1.el8
jenkins-2-pluginseq4.10.1671706212__1.el8
jenkins-2-pluginseq4.10.1667388055__1.el8
jenkins-2-pluginseq4.9.1644822177__1.el8
jenkins-2-pluginseq4.10.1647505461__1.el8

Name	Operator	Version
email extension plugin	le	2.96
email extension plugin	le	2.96
jenkins-2-plugins	eq	4.9.1667460322__1.el8
jenkins-2-plugins	eq	4.9.1674644684__1.el8
jenkins-2-plugins	eq	4.9.1642607680__1.el8
jenkins-2-plugins	eq	4.8.1642609156__1.el8
jenkins-2-plugins	eq	4.10.1671706212__1.el8
jenkins-2-plugins	eq	4.10.1667388055__1.el8
jenkins-2-plugins	eq	4.9.1644822177__1.el8
jenkins-2-plugins	eq	4.10.1647505461__1.el8