CVE-2020-2253

Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server...

org.jenkins-ci.plugins:cisco-spark (>=1.1.0, <=1.1.1), org.jenkins-ci.plugins:email-ext-recipients-column (1.0) +2 more potentially affected by CVE-2020-2253 via org.jenkins-ci.plugins:email-ext (>=2.25, <=2.43)

org.jenkins-ci.plugins:email-ext MAVEN version =2.25, =1.1.0, =1.1, =0.1-beta, =1.1 Source cves: CVE-2020-2253 Source advisory: GHSA-4QRJ-99R6-JFRH...

CVE-2020-2253

Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server...

CVE-2020-2253

CVE-2020-2253 affects Jenkins Email Extension Plugin (versions 2.75 and earlier). The issue is lack of hostname validation when connecting to the configured SMTP server, enabling potential man-in-the-middle interception. A fix is available in version 2.76 and later, which validates the SMTP hostn...

org.jenkins-ci.plugins:cisco-spark (>=1.1.0, <=1.1.1), org.jenkins-ci.plugins:email-ext-recipients-column (1.0) +2 more potentially affected by CVE-2020-2253 via org.jenkins-ci.plugins:email-ext (>=2.25, <=2.43)

org.jenkins-ci.plugins:email-ext MAVEN version =2.25, =1.1.0, =1.1, =0.1-beta, =1.1 Source cves: CVE-2020-2253 Source advisory: MEND:CVE-2020-2253...