{"id":"CVE-2020-2252","published":"2020-09-16T13:20:38Z","modified":"2024-08-04T07:01:41Z","title":"Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP…","vendor":"Jenkins","product":"Jenkins Mailer Plugin","tier":"tail","description":{"text":"Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00959,"percentile":0.61517,"provenance":"source"},"cwes":[],"references":[{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1813","tags":["x_refsource_CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2020/09/16/3","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":12.3,"factors":[{"name":"EPSS percentile","points":12.3}]},"vendorSlug":"jenkins","affectedVersions":[{"vendor":"Jenkins project","product":"Jenkins Mailer Plugin","versions":[">= unspecified, <= 1.32"]}],"affected":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:mailer","vulnerableRanges":[">=1.32, <1.32.1",">=1.30, <1.31.1","<1.29.1"],"patched":["1.32.1","1.31.1","1.29.1"],"from":["GHSA-6fr3-286q-q3cr"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2778","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2017-2651","published":"2018-07-27","fixed":"1.20","kev":false},{"cve":"CVE-2018-8718","published":"2018-03-27","fixed":"1.21","kev":false},{"cve":"CVE-2020-2252","published":"2020-09-16","fixed":"1.32.1","kev":false},{"cve":"CVE-2022-20613","published":"2022-01-12","fixed":"408.vd726a","kev":false,"link":{"from":"CVE-2020-2252","to":"CVE-2022-20613","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.jenkins-ci.plugins:mailer","fromFixed":"1.32.1","toFixed":"1.34.2","daysApart":483},{"kind":"similar","provenance":"machine","score":0.44,"basis":"same product + description similarity"}]}},{"cve":"CVE-2022-20614","published":"2022-01-12","fixed":"408.vd726a","kev":false,"link":{"from":"CVE-2020-2252","to":"CVE-2022-20614","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.jenkins-ci.plugins:mailer","fromFixed":"1.32.1","toFixed":"1.34.2","daysApart":483},{"kind":"similar","provenance":"machine","score":0.42,"basis":"same product + description similarity"}]}}],"package":"Maven:org.jenkins-ci.plugins:mailer"}}