Vulnerabilidades do Maven Org.jenkins-ci.plugins:email-ext

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Maven Org.jenkins-ci.plugins:email-ext: 1 registro(s), com versões afetadas e correções.

CVE-2026-48920 Alta · 8.8 CWE-73 27/05/2026

Jenkins Email Extension Plugin: Attackers able to control email content may specify `file:` URLs for images to read arbitrary files from Jenkins controller filesystem

Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email content by setting the `data-inline` attribute, without restrictions on the image URLs that can be inlined, allowing attackers able to control the email content to specify `file:` URLs for images to read arbitrary files from the Jenkins controller filesystem.