CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-8718

Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 75.0%

CVSS Severity

CVSS v3 Score 8.0

CVSS v2 Score 6.0

References

Products affected by CVE-2018-8718

Jenkins » Mailer » Version: 1.1

cpe:2.3:a:jenkins:mailer:1.1
Jenkins » Mailer » Version: 1.10

cpe:2.3:a:jenkins:mailer:1.10
Jenkins » Mailer » Version: 1.11

cpe:2.3:a:jenkins:mailer:1.11
Jenkins » Mailer » Version: 1.12

cpe:2.3:a:jenkins:mailer:1.12
Jenkins » Mailer » Version: 1.13

cpe:2.3:a:jenkins:mailer:1.13
Jenkins » Mailer » Version: 1.14

cpe:2.3:a:jenkins:mailer:1.14
Jenkins » Mailer » Version: 1.15

cpe:2.3:a:jenkins:mailer:1.15
Jenkins » Mailer » Version: 1.16

cpe:2.3:a:jenkins:mailer:1.16
Jenkins » Mailer » Version: 1.17

cpe:2.3:a:jenkins:mailer:1.17
Jenkins » Mailer » Version: 1.18

cpe:2.3:a:jenkins:mailer:1.18
Jenkins » Mailer » Version: 1.19

cpe:2.3:a:jenkins:mailer:1.19
Jenkins » Mailer » Version: 1.2

cpe:2.3:a:jenkins:mailer:1.2
Jenkins » Mailer » Version: 1.20

cpe:2.3:a:jenkins:mailer:1.20
Jenkins » Mailer » Version: 1.3

cpe:2.3:a:jenkins:mailer:1.3
Jenkins » Mailer » Version: 1.4

cpe:2.3:a:jenkins:mailer:1.4
Jenkins » Mailer » Version: 1.5

cpe:2.3:a:jenkins:mailer:1.5
Jenkins » Mailer » Version: 1.6

cpe:2.3:a:jenkins:mailer:1.6
Jenkins » Mailer » Version: 1.7

cpe:2.3:a:jenkins:mailer:1.7
Jenkins » Mailer » Version: 1.8

cpe:2.3:a:jenkins:mailer:1.8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-8718

Products

Pricing

Contact Us