CVE-2020-2253 – Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname

Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2253

Reference (s):

• https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1851
• URL: https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1851
• MLIST:[oss-security] 20200916 Multiple vulnerabilities in Jenkins plugins
• URL: http://www.openwall.com/lists/oss-security/2020/09/16/3