CVE-2020-2252

CVE-2020-2252: vulnerability in Jenkins Mailer Plugin

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.
Related CVEs — Jenkins Mailer Plugin

In the same product, most dangerous first.