{"id":"CVE-2020-2252","published":"2020-09-16T13:20:38Z","modified":"2024-08-04T07:01:41Z","title":"Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP…","vendor":"Jenkins","product":"Jenkins Mailer Plugin","tier":"tail","description":{"text":"Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00959,"percentile":0.61424,"provenance":"source"},"cwes":[],"references":[{"url":"https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1813","tags":["x_refsource_CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2020/09/16/3","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":12.3,"factors":[{"name":"EPSS percentile","points":12.28}]},"vendorSlug":"jenkins","affectedVersions":[{"vendor":"Jenkins project","product":"Jenkins Mailer Plugin","versions":[">= unspecified, <= 1.32"]}],"affected":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:mailer","vulnerableRanges":[">=1.32, <1.32.1",">=1.30, <1.31.1","<1.29.1"],"patched":["1.32.1","1.31.1","1.29.1"],"from":["GHSA-6fr3-286q-q3cr"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2778","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-jenkins-mailer-plugin-cve-2020-2252","children":[{"from":"CVE-2020-2252","to":"CVE-2022-20613","relation":"successor","confidence":"high","kind":"lineage","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.jenkins-ci.plugins:mailer","fromFixed":"1.32.1","toFixed":"1.34.2","daysApart":483},{"kind":"same-code","provenance":"machine","files":["src/main/java/hudson/tasks/Mailer.java"],"commits":["https://github.com/jenkinsci/mailer-plugin/commit/e1893c6d105669f134ee5c5212ef9f3944d7d00d","https://github.com/jenkinsci/mailer-plugin/commit/5e6051fae61a43564e22aa89cb24ed8a42a26052"],"basis":"rarely changed file"},{"kind":"similar","provenance":"machine","score":0.44,"basis":"same product + description similarity"}]},{"from":"CVE-2020-2252","to":"CVE-2022-20614","relation":"successor","confidence":"high","kind":"lineage","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.jenkins-ci.plugins:mailer","fromFixed":"1.32.1","toFixed":"1.34.2","daysApart":483},{"kind":"same-code","provenance":"machine","files":["src/main/java/hudson/tasks/Mailer.java"],"commits":["https://github.com/jenkinsci/mailer-plugin/commit/e1893c6d105669f134ee5c5212ef9f3944d7d00d","https://github.com/jenkinsci/mailer-plugin/commit/5e6051fae61a43564e22aa89cb24ed8a42a26052"],"basis":"rarely changed file"},{"kind":"similar","provenance":"machine","score":0.42,"basis":"same product + description similarity"}]}],"packageHistory":[{"cve":"CVE-2017-2651","published":"2018-07-27","fixed":"1.20","kev":false},{"cve":"CVE-2018-8718","published":"2018-03-27","fixed":"1.21","kev":false},{"cve":"CVE-2020-2252","published":"2020-09-16","fixed":"1.32.1","kev":false},{"cve":"CVE-2022-20613","published":"2022-01-12","fixed":"408.vd726a","kev":false},{"cve":"CVE-2022-20614","published":"2022-01-12","fixed":"408.vd726a","kev":false}],"package":"Maven:org.jenkins-ci.plugins:mailer"}}