Search for packages
| purl | pkg:maven/org.jenkins-ci.plugins/email-ext@2.96.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-bv8m-gtj8-d3eq | Cross-Site Request Forgery (CSRF) A cross-site request forgery (CSRF) vulnerability in Jenkins Email Extension Plugin allows attackers to make another user stop watching an attacker-specified job. |
CVE-2023-32980
GHSA-2f89-66v2-9p53 |
| VCID-vjar-udts-v7cg | Jenkins Email Extension Plugin missing permission check Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of files in the email-templates/ directory in the Jenkins home directory on the controller file system. |
CVE-2023-32979
GHSA-6gp4-2f92-j2w5 |