~ / search / GHSA-4m38-gqh8-x266

GHSA-4m38-gqh8-x266

CSRF vulnerability in Email Extension Template Plugin

Source: GitHub Advisory Database (reviewed) High CVE-2018-1000417

Packages

EcosystemPackageAffectedFixed in
Maven org.jenkins-ci.plugins:email-ext < 1.1 1.1

Details

As written in the advisory (Markdown source, shown as plain text).

A cross-site request forgery vulnerability exists in Jenkins Email Extension Template Plugin 1.0 and earlier in ExtEmailTemplateManagement.java that allows creating or removing templates.

References

External links from the advisory. They lead to third-party sites.