org.jenkins-ci.plugins:email-ext vulnerabilities (Maven)
12 vulnerabilities.
org.jenkins-ci.plugins:email-extMavenJenkins Email Extension Plugin: Attackers able to control email content may specify `file:` URLs for images to read arbitrary files from Jenkins controller filesystem8.8 Highorg.jenkins-ci.plugins:email-extMavenJenkins Email Extension Plugin Cross-Site Request Forgery vulnerability4.3 Mediumorg.jenkins-ci.plugins:email-extMavenJenkins Email Extension Plugin missing permission check4.3 Mediumorg.jenkins-ci.plugins:email-extMavenSandbox escape in Jenkins Email Extension Plugin9.9 Criticalorg.jenkins-ci.plugins:email-extMavenCross-site Scripting in Jenkins Email Extension Plugin5.4 Mediumorg.jenkins-ci.plugins:email-extMavenCross-site Scripting in Jenkins Email Extension Plugin5.4 Mediumorg.jenkins-ci.plugins:email-extMavenMissing hostname validation in Email Extension Plugin4.8 Mediumorg.jenkins-ci.plugins:email-extMavenJenkins Email Extension Plugin SMTP password transmitted and displayed in plain text7.5 Highorg.jenkins-ci.plugins:email-extMavenScript security sandbox bypass in Jenkins Email Extension Plugin9.9 Criticalorg.jenkins-ci.plugins:email-extMavenCSRF vulnerability in Email Extension Template Plugin8.1 Highorg.jenkins-ci.plugins:email-extMavenEmails were sent to addresses not associated with actual users of Jenkins by Email Extension Plugin3.7 Loworg.jenkins-ci.plugins:email-extMavenJenkins Email Extension Plugin showed plain text SMTP password in configuration form field6.5 Medium