Skip to content
Sign in
5.4 Medium

CVE-2023-25763 Jenkins Email Extension Plugin 2.93 and earlier does not escape various fields included in bundled email templates,…

Description

Jenkins Email Extension Plugin 2.93 and earlier does not escape various fields included in bundled email templates, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control affected fields.

Affected products and versions

Product Affected versions Fixed in
Jenkins Email Extension Plugin 2.93 earliest → 2.93 No fix stated
Jenkins Email Extension Plugin 2.89 earliest → < 2.89.0.1 2.89.0.1

Other CVEs of Jenkins Email Extension Plugin

The 9 CVEs of Jenkins Email Extension Plugin →
CVE-2026-48920 Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email content by… 8.8 High CVE-2023-32980 A cross-site request forgery (CSRF) vulnerability in Jenkins Email Extension Plugin allows attackers to make another… 4.3 Medium CVE-2023-32979 Jenkins Email Extension Plugin does not perform a permission check in a method implementing form validation, allowing… 4.3 Medium CVE-2023-25765 In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script… 9.9 Critical
Track this CVE