CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-25765

In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, allowing attackers able to define email templates in folders to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 7.6%

CVSS Severity

CVSS v3 Score 9.9

References

Products affected by CVE-2023-25765

Jenkins » Email Extension » Version: 1.0

cpe:2.3:a:jenkins:email_extension:1.0
Jenkins » Email Extension » Version: 1.1

cpe:2.3:a:jenkins:email_extension:1.1
Jenkins » Email Extension » Version: 1.2

cpe:2.3:a:jenkins:email_extension:1.2
Jenkins » Email Extension » Version: 2.0

cpe:2.3:a:jenkins:email_extension:2.0
Jenkins » Email Extension » Version: 2.1

cpe:2.3:a:jenkins:email_extension:2.1
Jenkins » Email Extension » Version: 2.10

cpe:2.3:a:jenkins:email_extension:2.10
Jenkins » Email Extension » Version: 2.11

cpe:2.3:a:jenkins:email_extension:2.11
Jenkins » Email Extension » Version: 2.12

cpe:2.3:a:jenkins:email_extension:2.12
Jenkins » Email Extension » Version: 2.13

cpe:2.3:a:jenkins:email_extension:2.13
Jenkins » Email Extension » Version: 2.14

cpe:2.3:a:jenkins:email_extension:2.14
Jenkins » Email Extension » Version: 2.14.1

cpe:2.3:a:jenkins:email_extension:2.14.1
Jenkins » Email Extension » Version: 2.15

cpe:2.3:a:jenkins:email_extension:2.15
Jenkins » Email Extension » Version: 2.16

cpe:2.3:a:jenkins:email_extension:2.16
Jenkins » Email Extension » Version: 2.17

cpe:2.3:a:jenkins:email_extension:2.17
Jenkins » Email Extension » Version: 2.18

cpe:2.3:a:jenkins:email_extension:2.18
Jenkins » Email Extension » Version: 2.19

cpe:2.3:a:jenkins:email_extension:2.19
Jenkins » Email Extension » Version: 2.2

cpe:2.3:a:jenkins:email_extension:2.2
Jenkins » Email Extension » Version: 2.2.1

cpe:2.3:a:jenkins:email_extension:2.2.1
Jenkins » Email Extension » Version: 2.20

cpe:2.3:a:jenkins:email_extension:2.20
Jenkins » Email Extension » Version: 2.21

cpe:2.3:a:jenkins:email_extension:2.21
Jenkins » Email Extension » Version: 2.22

cpe:2.3:a:jenkins:email_extension:2.22
Jenkins » Email Extension » Version: 2.24

cpe:2.3:a:jenkins:email_extension:2.24
Jenkins » Email Extension » Version: 2.24.1

cpe:2.3:a:jenkins:email_extension:2.24.1
Jenkins » Email Extension » Version: 2.25

cpe:2.3:a:jenkins:email_extension:2.25
Jenkins » Email Extension » Version: 2.27

cpe:2.3:a:jenkins:email_extension:2.27
Jenkins » Email Extension » Version: 2.27.1

cpe:2.3:a:jenkins:email_extension:2.27.1
Jenkins » Email Extension » Version: 2.28

cpe:2.3:a:jenkins:email_extension:2.28
Jenkins » Email Extension » Version: 2.29

cpe:2.3:a:jenkins:email_extension:2.29
Jenkins » Email Extension » Version: 2.3

cpe:2.3:a:jenkins:email_extension:2.3
Jenkins » Email Extension » Version: 2.30

cpe:2.3:a:jenkins:email_extension:2.30
Jenkins » Email Extension » Version: 2.30.1

cpe:2.3:a:jenkins:email_extension:2.30.1
Jenkins » Email Extension » Version: 2.30.2

cpe:2.3:a:jenkins:email_extension:2.30.2
Jenkins » Email Extension » Version: 2.31

cpe:2.3:a:jenkins:email_extension:2.31
Jenkins » Email Extension » Version: 2.32

cpe:2.3:a:jenkins:email_extension:2.32
Jenkins » Email Extension » Version: 2.33

cpe:2.3:a:jenkins:email_extension:2.33
Jenkins » Email Extension » Version: 2.34

cpe:2.3:a:jenkins:email_extension:2.34
Jenkins » Email Extension » Version: 2.35

cpe:2.3:a:jenkins:email_extension:2.35
Jenkins » Email Extension » Version: 2.35.1

cpe:2.3:a:jenkins:email_extension:2.35.1
Jenkins » Email Extension » Version: 2.36

cpe:2.3:a:jenkins:email_extension:2.36
Jenkins » Email Extension » Version: 2.37

cpe:2.3:a:jenkins:email_extension:2.37
Jenkins » Email Extension » Version: 2.37.1

cpe:2.3:a:jenkins:email_extension:2.37.1
Jenkins » Email Extension » Version: 2.37.2

cpe:2.3:a:jenkins:email_extension:2.37.2
Jenkins » Email Extension » Version: 2.37.2.2

cpe:2.3:a:jenkins:email_extension:2.37.2.2
Jenkins » Email Extension » Version: 2.38

cpe:2.3:a:jenkins:email_extension:2.38
Jenkins » Email Extension » Version: 2.38.1

cpe:2.3:a:jenkins:email_extension:2.38.1
Jenkins » Email Extension » Version: 2.38.2

cpe:2.3:a:jenkins:email_extension:2.38.2
Jenkins » Email Extension » Version: 2.39

cpe:2.3:a:jenkins:email_extension:2.39
Jenkins » Email Extension » Version: 2.39.2

cpe:2.3:a:jenkins:email_extension:2.39.2
Jenkins » Email Extension » Version: 2.39.3

cpe:2.3:a:jenkins:email_extension:2.39.3
Jenkins » Email Extension » Version: 2.4

cpe:2.3:a:jenkins:email_extension:2.4
Jenkins » Email Extension » Version: 2.40

cpe:2.3:a:jenkins:email_extension:2.40
Jenkins » Email Extension » Version: 2.40.1

cpe:2.3:a:jenkins:email_extension:2.40.1
Jenkins » Email Extension » Version: 2.40.2

cpe:2.3:a:jenkins:email_extension:2.40.2
Jenkins » Email Extension » Version: 2.40.3

cpe:2.3:a:jenkins:email_extension:2.40.3
Jenkins » Email Extension » Version: 2.40.4

cpe:2.3:a:jenkins:email_extension:2.40.4
Jenkins » Email Extension » Version: 2.40.5

cpe:2.3:a:jenkins:email_extension:2.40.5
Jenkins » Email Extension » Version: 2.41

cpe:2.3:a:jenkins:email_extension:2.41
Jenkins » Email Extension » Version: 2.41.2

cpe:2.3:a:jenkins:email_extension:2.41.2
Jenkins » Email Extension » Version: 2.41.3

cpe:2.3:a:jenkins:email_extension:2.41.3
Jenkins » Email Extension » Version: 2.42

cpe:2.3:a:jenkins:email_extension:2.42
Jenkins » Email Extension » Version: 2.43

cpe:2.3:a:jenkins:email_extension:2.43
Jenkins » Email Extension » Version: 2.44

cpe:2.3:a:jenkins:email_extension:2.44
Jenkins » Email Extension » Version: 2.45

cpe:2.3:a:jenkins:email_extension:2.45
Jenkins » Email Extension » Version: 2.46

cpe:2.3:a:jenkins:email_extension:2.46
Jenkins » Email Extension » Version: 2.47

cpe:2.3:a:jenkins:email_extension:2.47
Jenkins » Email Extension » Version: 2.48

cpe:2.3:a:jenkins:email_extension:2.48
Jenkins » Email Extension » Version: 2.49

cpe:2.3:a:jenkins:email_extension:2.49
Jenkins » Email Extension » Version: 2.5

cpe:2.3:a:jenkins:email_extension:2.5
Jenkins » Email Extension » Version: 2.50

cpe:2.3:a:jenkins:email_extension:2.50
Jenkins » Email Extension » Version: 2.51

cpe:2.3:a:jenkins:email_extension:2.51
Jenkins » Email Extension » Version: 2.52

cpe:2.3:a:jenkins:email_extension:2.52
Jenkins » Email Extension » Version: 2.53

cpe:2.3:a:jenkins:email_extension:2.53
Jenkins » Email Extension » Version: 2.54

cpe:2.3:a:jenkins:email_extension:2.54
Jenkins » Email Extension » Version: 2.55

cpe:2.3:a:jenkins:email_extension:2.55
Jenkins » Email Extension » Version: 2.56

cpe:2.3:a:jenkins:email_extension:2.56
Jenkins » Email Extension » Version: 2.57

cpe:2.3:a:jenkins:email_extension:2.57
Jenkins » Email Extension » Version: 2.57.1

cpe:2.3:a:jenkins:email_extension:2.57.1
Jenkins » Email Extension » Version: 2.57.2

cpe:2.3:a:jenkins:email_extension:2.57.2
Jenkins » Email Extension » Version: 2.58

cpe:2.3:a:jenkins:email_extension:2.58
Jenkins » Email Extension » Version: 2.59

cpe:2.3:a:jenkins:email_extension:2.59
Jenkins » Email Extension » Version: 2.6

cpe:2.3:a:jenkins:email_extension:2.6
Jenkins » Email Extension » Version: 2.60

cpe:2.3:a:jenkins:email_extension:2.60
Jenkins » Email Extension » Version: 2.61

cpe:2.3:a:jenkins:email_extension:2.61
Jenkins » Email Extension » Version: 2.62

cpe:2.3:a:jenkins:email_extension:2.62
Jenkins » Email Extension » Version: 2.63

cpe:2.3:a:jenkins:email_extension:2.63
Jenkins » Email Extension » Version: 2.64

cpe:2.3:a:jenkins:email_extension:2.64
Jenkins » Email Extension » Version: 2.65

cpe:2.3:a:jenkins:email_extension:2.65
Jenkins » Email Extension » Version: 2.66

cpe:2.3:a:jenkins:email_extension:2.66
Jenkins » Email Extension » Version: 2.67

cpe:2.3:a:jenkins:email_extension:2.67
Jenkins » Email Extension » Version: 2.68

cpe:2.3:a:jenkins:email_extension:2.68
Jenkins » Email Extension » Version: 2.69

cpe:2.3:a:jenkins:email_extension:2.69
Jenkins » Email Extension » Version: 2.7

cpe:2.3:a:jenkins:email_extension:2.7
Jenkins » Email Extension » Version: 2.71

cpe:2.3:a:jenkins:email_extension:2.71
Jenkins » Email Extension » Version: 2.72

cpe:2.3:a:jenkins:email_extension:2.72
Jenkins » Email Extension » Version: 2.73

cpe:2.3:a:jenkins:email_extension:2.73
Jenkins » Email Extension » Version: 2.74

cpe:2.3:a:jenkins:email_extension:2.74
Jenkins » Email Extension » Version: 2.75

cpe:2.3:a:jenkins:email_extension:2.75
Jenkins » Email Extension » Version: 2.76

cpe:2.3:a:jenkins:email_extension:2.76
Jenkins » Email Extension » Version: 2.77

cpe:2.3:a:jenkins:email_extension:2.77
Jenkins » Email Extension » Version: 2.78

cpe:2.3:a:jenkins:email_extension:2.78
Jenkins » Email Extension » Version: 2.79

cpe:2.3:a:jenkins:email_extension:2.79
Jenkins » Email Extension » Version: 2.8

cpe:2.3:a:jenkins:email_extension:2.8
Jenkins » Email Extension » Version: 2.80

cpe:2.3:a:jenkins:email_extension:2.80
Jenkins » Email Extension » Version: 2.81

cpe:2.3:a:jenkins:email_extension:2.81
Jenkins » Email Extension » Version: 2.82

cpe:2.3:a:jenkins:email_extension:2.82
Jenkins » Email Extension » Version: 2.83

cpe:2.3:a:jenkins:email_extension:2.83
Jenkins » Email Extension » Version: 2.84

cpe:2.3:a:jenkins:email_extension:2.84
Jenkins » Email Extension » Version: 2.85

cpe:2.3:a:jenkins:email_extension:2.85
Jenkins » Email Extension » Version: 2.86

cpe:2.3:a:jenkins:email_extension:2.86
Jenkins » Email Extension » Version: 2.87

cpe:2.3:a:jenkins:email_extension:2.87
Jenkins » Email Extension » Version: 2.88

cpe:2.3:a:jenkins:email_extension:2.88
Jenkins » Email Extension » Version: 2.89

cpe:2.3:a:jenkins:email_extension:2.89
Jenkins » Email Extension » Version: 2.89.0.1

cpe:2.3:a:jenkins:email_extension:2.89.0.1
Jenkins » Email Extension » Version: 2.89.1

cpe:2.3:a:jenkins:email_extension:2.89.1
Jenkins » Email Extension » Version: 2.9

cpe:2.3:a:jenkins:email_extension:2.9
Jenkins » Email Extension » Version: 2.90

cpe:2.3:a:jenkins:email_extension:2.90
Jenkins » Email Extension » Version: 2.91

cpe:2.3:a:jenkins:email_extension:2.91
Jenkins » Email Extension » Version: 2.92

cpe:2.3:a:jenkins:email_extension:2.92
Jenkins » Email Extension » Version: 2.93

cpe:2.3:a:jenkins:email_extension:2.93

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-25765

Products

Pricing

Contact Us