CVE-2019-1003032

A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml, src/main/java/hudson/plugins/emailext/ExtendedEmailPublisher.java, src/main/java/hudson/plugins/emailext/plugins/content/EmailExtScript.java,...

CVE-2019-1003032

A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml, src/main/java/hudson/plugins/emailext/ExtendedEmailPublisher.java, src/main/java/hudson/plugins/emailext/plugins/content/EmailExtScript.java,...

CVE-2019-1003032

CVE-2019-1003032 affects the Jenkins Email Extension Plugin (versions ≤ 2.64). A sandbox bypass in files such as ExtendedEmailPublisher.java, EmailExtScript.java, ScriptContent.java, AbstractScriptTrigger.java, and related pom.xml logic allows attackers with Job/Configure permission to execute ar...

CVE-2019-1003032: Undefined Security Weakness

A sandbox bypass vulnerability exists in Jenkins Email Extension Plugin 2.64 and earlier in pom.xml, src/main/java/hudson/plugins/emailext/ExtendedEmailPublisher.java, src/main/java/hudson/plugins/emailext/plugins/content/EmailExtScript.java,...

CloudBees Jenkins Email Extension Template Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. that are used to monitor continuous software release/testing projects and a number of timed tasks.Email Extension Template Plugin is used in it. An email notification plugin . ...

PT-2018-7162

Name of the Vulnerable Software and Affected Versions: Jenkins-email-ext versions prior to 2.57.1 Description: The issue allows the Email Extension Plugin to send emails to a dynamically created list of users based on changelogs, such as authors of SCM changes since the last successful build. Thi...

CloudBees Jenkins Email Extension Plugin Information Disclosure Vulnerability (CNVD-2018-11045)

CloudBees Jenkins is a set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Email Extension Plugin is used in one of the email plugin . CloudBees...

CloudBees Jenkins Email Extension Plugin Information Disclosure Vulnerability

CloudBees Jenkins is a set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Email Extension Plugin is used in one of the email plugin . CloudBees...

CVE-2018-1000176

An exposure of sensitive information vulnerability exists in Jenkins Email Extension Plugin 2.61 and older in src/main/resources/hudson/plugins/emailext/ExtendedEmailPublisher/global.groovy and ExtendedEmailPublisherDescriptor.java that allows attackers with control of a Jenkins administrator's w...

CVE-2018-1000176

An exposure of sensitive information vulnerability exists in Jenkins Email Extension Plugin 2.61 and older in src/main/resources/hudson/plugins/emailext/ExtendedEmailPublisher/global.groovy and ExtendedEmailPublisherDescriptor.java that allows attackers with control of a Jenkins administrator's w...

CVE-2018-1000176

CVE-2018-1000176 affects Jenkins and the Email Extension Plugin (versions ≤ 2.61). The vulnerability resides in src/main/resources/hudson/plugins/emailext/ExtendedEmailPublisher/global.groovy and ExtendedEmailPublisherDescriptor.java, allowing an attacker who controls a Jenkins administrator’s we...

PT-2018-9346

Name of the Vulnerable Software and Affected Versions Jenkins Email Extension Plugin versions 2.61 and older Description The issue allows attackers with control of a Jenkins administrator's web browser to retrieve the configured SMTP password due to an exposure of sensitive information. This can...

CVE-2018-1000176: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive information vulnerability exists in Jenkins Email Extension Plugin 2.61 and older in src/main/resources/hudson/plugins/emailext/ExtendedEmailPublisher/global.groovy and ExtendedEmailPublisherDescriptor.java that allows attackers with control of a Jenkins administrator's w...

CVE-2018-9035

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form...

CVE-2018-9035

CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordPress allows remote attackers to inject spreadsheet formulas into CSV files via the contact form...