Low severity3.7NVD Advisory· Published Aug 6, 2018· Updated Jun 17, 2026
CVE-2017-2654
CVE-2017-2654
Description
jenkins-email-ext before version 2.57.1 is vulnerable to an Information Exposure. The Email Extension Plugins is able to send emails to a dynamically created list of users based on the changelogs, like authors of SCM changes since the last successful build. This could in some cases result in emails being sent to people who have no user account in Jenkins, and in rare cases even people who were not involved in whatever project was being built, due to some mapping based on the local-part of email addresses.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:email-extMaven | < 2.57.1 | 2.57.1 |
Affected products
1Patches
Vulnerability mechanics
References
5- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-c8qr-vfjf-62q3ghsaADVISORY
- jenkins.io/security/advisory/2017-03-20/nvdVendor Advisory
- nvd.nist.gov/vuln/detail/CVE-2017-2654ghsaADVISORY
- jenkins.io/security/advisory/2017-03-20ghsaWEB
News mentions
0No linked articles in our index yet.