-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:email-ext | maven | < 2.96.1 | 2.96.1 |
Miggo AIRoot Cause AnalysisThe vulnerability centers on missing permission checks in a form validation method. Jenkins plugin security patterns indicate:- 1) Form validation methods follow doCheck[ParameterName] pattern in DescriptorImpl classes 2) Email template handling would logically have a method validating template paths 3) The CVE description explicitly mentions form validation method hardening. While no patch diffs are available, the combination of Jenkins plugin architecture patterns and advisory specifics strongly indicates EmailExtTemplate's DescriptorImpl.doCheckTemplate as the vulnerable method.