Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 2:14 a.m.12 views

CVE-2023-25764

Jenkins Email Extension Plugin 2.93 and earlier does not escape, sanitize, or sandbox rendered email template output or log output generated during template rendering, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to create or change custom email...

5.4CVSS5.5AI score0.00602EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/02/15 12:0 a.m.12 views

CVE-2023-25764

Jenkins Email Extension Plugin 2.93 and earlier does not escape, sanitize, or sandbox rendered email template output or log output generated during template rendering, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to create or change custom email...

5.3AI score0.00602EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/02/15 12:0 a.m.38 views

CVE-2023-25764

Jenkins Email Extension Plugin 2.93 and earlier does not escape, sanitize, or sandbox rendered email template output or log output generated during template rendering, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to create or change custom email...

5.5AI score0.00602EPSS
Exploits0References2
CVE
CVE
added 2023/02/15 12:0 a.m.81 views

CVE-2023-25764

CVE-2023-25764 affects Jenkins Email Extension Plugin up to version 2.93. The vulnerability is a stored XSS caused by the plugin not escaping, sanitizing, or sandboxing rendered email template output or log output during template rendering. This allows an attacker who can create or modify custom ...

5.4CVSS5.3AI score0.00602EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder