EDB-44843

PoC

Jenkins Mailer Plugin < 1.20 - Cross-Site Request Forgery (Send Email)

view exploit source exploit_dbtype webappsauthor Kl3_GMjq6published 2018-06-05catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-8718UShigh8.0Exploit
Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan