BDU%3A2023-07534 — Vulnetix

BDU%3A2023-07534 PUBLISHED CVSS 9 CRITICAL

Уязвимость плагина для электронной почты Jenkins Email Extension, связанная с недостатками контроля доступа, позволяющая нарушителю выполнить произвольный код

Risk Scores

CVSS 2.0

Affected Products

Vendor	Product	Versions
Jenkins Project	Jenkins Email Extension Plugin	unspecified, 2.89.0.1
Jenkins	Email Extension

Timeline

Feb 15, 2023 PoC Published
Nov 9, 2023 CVE Published
Mar 19, 2025 PoC Published

References

https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2939 url
https://www.openwall.com/lists/oss-security/2023/02/15/4 url
[oss-security] 20230215 Multiple vulnerabilities in Jenkins plugins mailing-list

Open in Interactive Console →