Low severity3.7NVD Advisory· Published Jul 27, 2018· Updated Jun 17, 2026
CVE-2017-2651
CVE-2017-2651
Description
jenkins-mailer-plugin before version 1.20 is vulnerable to an information disclosure while using the feature to send emails to a dynamically created list of users based on the changelogs. This could in some cases result in emails being sent to people who have no user account in Jenkins, and in rare cases even people who were not involved in whatever project was being built, due to some mapping based on the local-part of email addresses.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:mailerMaven | < 1.20 | 1.20 |
Affected products
2- Range: 1.20
Patches
Vulnerability mechanics
References
6- www.securityfocus.com/bid/96984nvdThird Party AdvisoryVDB EntryWEB
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-9v72-p5p3-9w65ghsaADVISORY
- jenkins.io/security/advisory/2017-03-20/nvdVendor Advisory
- nvd.nist.gov/vuln/detail/CVE-2017-2651ghsaADVISORY
- jenkins.io/security/advisory/2017-03-20ghsaWEB
News mentions
0No linked articles in our index yet.