CVE-2018-8718

Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an…

published March 27, 2018

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06516 · 93.8th percentile
Published
2018-03-27T16:00Z
EPSS history
Timeline
  • 27 MAR 16:00Z
    Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an…
    cvelistv5