CVSS 3.1
4.8 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:NCVE-2020-2252
Medium (4.8) in jenkins mailer. EPSS 1.0% chance of exploitation in the next 30 days. Fixed in org.jenkins-ci.plugins:mailer 1.29.1, 1.31.1, 1.32.1.
Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
- CWE
- CWE-295
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:mailer
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6fr3-286q-q3cr | Maven | org.jenkins-ci.plugins:mailer | >=1.32 <1.32.1 | 1.32.1 |
| GHSA-6fr3-286q-q3cr | Maven | org.jenkins-ci.plugins:mailer | >=1.30 <1.31.1 | 1.31.1 |
| GHSA-6fr3-286q-q3cr | Maven | org.jenkins-ci.plugins:mailer | <1.29.1 | 1.29.1 |