CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2020-2232
High (7.5) in jenkins email extension. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:email-ext 2.74.
Jenkins Email Extension Plugin 2.72 and 2.73 transmits and displays the SMTP password in plain text as part of the global Jenkins configuration form, potentially resulting in its exposure.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
- CWE
- CWE-319
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:email_extension
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-5c4v-vh95-c67c | Maven | org.jenkins-ci.plugins:email-ext | >=2.72 <2.74 | 2.74 |