by Kastro
Paper/Archive/CVE-2023-25765

CVE-2023-25765

Jenkins Project Jenkins Email Extension Plugin — In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, all…

EPSS 1%CVSS 9.9
critical.is priorityof 100
43
CVSS 9.9 (NVD, ADP agree)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 65.5.655 × 2013.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, allowing attackers able to define email templates in folders to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.

Affected

ProductAffectedFixed inSource
Jenkins Email Extension Pluginunspecified – 2.93–CNA

Scores by source

CISA ADP9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refjenkins.io/security/advisory/2023-02-15/#SECURITY-2939refopenwall.com/lists/oss-security/2023/02/15/4