Skip to contentJenkins Email Extension vulnerabilities
- jenkins email extension, jenkins project email extension plugin +1 moreJenkins Email Extension Plugin: Attackers able to control email content may specify `file:` URLs for images to read arbitrary files from Jenkins controller filesystemCVE-2026-48920Fix available8.8 High
- jenkins email extension, jenkins project email extension plugin +1 moreJenkins Email Extension Plugin Cross-Site Request Forgery vulnerabilityCVE-2023-32980Fix available4.3 Medium
- jenkins email extension, jenkins project email extension plugin +1 moreJenkins Email Extension Plugin missing permission checkCVE-2023-32979Fix available4.3 Medium
- jenkins email extension, jenkins project email extension plugin +1 moreSandbox escape in Jenkins Email Extension PluginCVE-2023-25765Fix available9.9 Critical
- jenkins email extension, jenkins project email extension plugin +1 moreCross-site Scripting in Jenkins Email Extension PluginCVE-2023-25764Fix available5.4 Medium
- jenkins email extension, jenkins project email extension plugin +1 moreCross-site Scripting in Jenkins Email Extension PluginCVE-2023-25763Fix available5.4 Medium
- jenkins email extension, jenkins project email extension plugin +1 moreMissing hostname validation in Email Extension PluginCVE-2020-2253Fix available4.8 Medium
- jenkins email extension, jenkins project email extension plugin +1 moreJenkins Email Extension Plugin SMTP password transmitted and displayed in plain textCVE-2020-2232Fix available7.5 High
- jenkins email extension, jenkins project email extension plugin +1 moreScript security sandbox bypass in Jenkins Email Extension PluginCVE-2019-1003032Fix available9.9 Critical
- jenkins email extension templateCSRF vulnerability in Email Extension Template PluginCVE-2018-1000417Fix available8.1 High
- [unknown] jenkins-email-ext, jenkins email extension +1 moreEmails were sent to addresses not associated with actual users of Jenkins by Email Extension PluginCVE-2017-2654Fix available3.7 Low
- jenkins email extensionJenkins Email Extension Plugin showed plain text SMTP password in configuration form fieldCVE-2018-1000176Fix available6.5 Medium