EUVD-2017-18449

Malware in sbrugna...

PT-2020-15476 · Jenkins · Jenkins Mailer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Mailer Plugin versions 1.32 and earlier Description: The issue is related to the lack of hostname validation when connecting to the configured SMTP server. This could be exploited using a man-in-the-middle attack to intercept...

PT-2020-15477 · Jenkins · Jenkins Email Extension Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Email Extension Plugin versions 2.75 and earlier Description: The issue is related to the lack of hostname validation when connecting to the configured SMTP server. This could be exploited using a man-in-the-middle attack to intercept...

CVE-2017-9518

atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...

CVE-2017-9518: Cross-Site Request Forgery (CSRF)

atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...

PT-2017-18985

Name of the Vulnerable Software and Affected Versions atmail versions prior to 7.8.0.2 Description The issue allows an attacker to perform a CSRF attack, enabling them to change the SMTP hostname. This can lead to the hijacking of all emails. Recommendations For versions prior to 7.8.0.2, update ...