CVE-2023-25764

🗓️ 15 Feb 2023 00:00:00Reported by jenkinsType

Jenkins Email Extension Plugin 2.93 and earlier stored cross-site scripting (XSS) vulnerabilit

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-25764	15 Feb 202316:36	–	circl
Tenable Nessus	Jenkins Enterprise and Operations Center 2.346.x < 2.346.40.0.9 Multiple Vulnerabilities (CloudBees Security Advisory 2023-02-15)	15 Feb 202300:00	–	nessus
CNNVD	Jenkins Plugin Email Extension 跨站脚本漏洞	15 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-25764	15 Feb 202300:00	–	cvelist
EUVD	EUVD-2023-0746	3 Oct 202520:07	–	euvd
Github Security Blog	Cross-site Scripting in Jenkins Email Extension Plugin	15 Feb 202315:30	–	github
NVD	CVE-2023-25764	15 Feb 202314:15	–	nvd
OSV	GHSA-P2FR-MQ9M-6W6P Cross-site Scripting in Jenkins Email Extension Plugin	15 Feb 202315:30	–	osv
Prion	Cross site scripting	15 Feb 202314:15	–	prion
RedhatCVE	CVE-2023-25764	23 May 202502:14	–	redhatcve

NVD

Node

jenkins email_extensionRange<2.93.1jenkins

[
  {
    "product": "Jenkins Email Extension Plugin",
    "vendor": "Jenkins Project",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "lessThanOrEqual": "2.93",
        "status": "affected",
        "version": "0",
        "versionType": "maven"
      },
      {
        "status": "unaffected",
        "version": "2.89.0.1"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/02/15/4
jenkins	www.jenkins.io/security/advisory/2023-02-15/

19 Mar 2025 17:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.4

EPSS0.20595

SSVC

CWE-79