https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 08:37:58 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-59712 cnvd-2020-59712 https://cve.radiocsirt.org/vuln/cnvd-2020-59712 https://cve.radiocsirt.org/vuln/euvd-2026-35980 EUVD-2026-35980 https://cve.radiocsirt.org/vuln/euvd-2026-35980 https://cve.radiocsirt.org/vuln/fkie_cve-2020-2253 <p>Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server.</p> <p>Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-2253 https://cve.radiocsirt.org/vuln/ghsa-4qrj-99r6-jfrh <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:email-ext</p> <p>Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server. This lack of validation could be abused using a man-in-the-middle attack to intercept these connections.</p> <p>Email Extension Plugin 2.76 validates the SMTP hostname when connecting via TLS by default. In Email Extension Plugin 2.75 and earlier, administrators can set the Java system property `mail.smtp.ssl.checkserveridentity` to `true` on startup to enable this protection. Alternatively, this protection can be enabled (or disabled in the new version) via the &#39;Advanced Email Properties&#39; field in the plugin’s configuration in Configure System.</p> <p>In case of problems, this protection can be disabled again by setting `mail.smtp.ssl.checkserveridentity` to `false` using either method.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:email-ext</p> <p>Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server. This lack of validation could be abused using a man-in-the-middle attack to intercept these connections.</p> <p>Email Extension Plugin 2.76 validates the SMTP hostname when connecting via TLS by default. In Email Extension Plugin 2.75 and earlier, administrators can set the Java system property `mail.smtp.ssl.checkserveridentity` to `true` on startup to enable this protection. Alternatively, this protection can be enabled (or disabled in the new version) via the &#39;Advanced Email Properties&#39; field in the plugin’s configuration in Configure System.</p> <p>In case of problems, this protection can be disabled again by setting `mail.smtp.ssl.checkserveridentity` to `false` using either method.</p> https://cve.radiocsirt.org/vuln/ghsa-4qrj-99r6-jfrh https://cve.radiocsirt.org/vuln/gsd-2020-2253 gsd-2020-2253 https://cve.radiocsirt.org/vuln/gsd-2020-2253