-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:email-ext | maven | <= 2.93 | 2.94 |
The patches show that the vulnerability is mitigated by escaping user-controlled data in email templates using hudson.Util.xmlEscape. The exact vulnerable functions are not directly named in the patch but are related to rendering these templates. The Util.xmlEscape method is key to understanding the mitigation.