CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-48920

Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as `base64` in email content by setting the `data-inline` attribute, without restrictions on the image URLs that can be inlined, allowing attackers able to control the email content to specify `file:` URLs for images to read arbitrary files from the Jenkins controller filesystem.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 21.4%

CVSS Severity

CVSS v3 Score 8.8

References

https://www.jenkins.io/security/advisory/2026-05-27/#SECURITY-3705

Products affected by CVE-2026-48920

Jenkins » Email Extension » Version: 1.0

cpe:2.3:a:jenkins:email_extension:1.0
Jenkins » Email Extension » Version: 1.1

cpe:2.3:a:jenkins:email_extension:1.1
Jenkins » Email Extension » Version: 1.2

cpe:2.3:a:jenkins:email_extension:1.2
Jenkins » Email Extension » Version: 1806.v856a_01a_fa_39a_

cpe:2.3:a:jenkins:email_extension:1806.v856a_01a_fa_39a_
Jenkins » Email Extension » Version: 1814.v404722f34263

cpe:2.3:a:jenkins:email_extension:1814.v404722f34263
Jenkins » Email Extension » Version: 1844.v3ea_a_b_842374a_

cpe:2.3:a:jenkins:email_extension:1844.v3ea_a_b_842374a_
Jenkins » Email Extension » Version: 1849.v6dd03b_f6e423

cpe:2.3:a:jenkins:email_extension:1849.v6dd03b_f6e423
Jenkins » Email Extension » Version: 1851.v2b_5345e6272d

cpe:2.3:a:jenkins:email_extension:1851.v2b_5345e6272d
Jenkins » Email Extension » Version: 1855.vd9e491cb_de1e

cpe:2.3:a:jenkins:email_extension:1855.vd9e491cb_de1e
Jenkins » Email Extension » Version: 1861.vdb_d991590994

cpe:2.3:a:jenkins:email_extension:1861.vdb_d991590994
Jenkins » Email Extension » Version: 1866.v14fa_6d201654

cpe:2.3:a:jenkins:email_extension:1866.v14fa_6d201654
Jenkins » Email Extension » Version: 1876.v28d8d38315b_d

cpe:2.3:a:jenkins:email_extension:1876.v28d8d38315b_d
Jenkins » Email Extension » Version: 1911.v19b_8e86f9815

cpe:2.3:a:jenkins:email_extension:1911.v19b_8e86f9815
Jenkins » Email Extension » Version: 1916.vc954a_f86ff21

cpe:2.3:a:jenkins:email_extension:1916.vc954a_f86ff21
Jenkins » Email Extension » Version: 1922.v5c93c9e80a_f9

cpe:2.3:a:jenkins:email_extension:1922.v5c93c9e80a_f9
Jenkins » Email Extension » Version: 1925.v1598902b_58dd

cpe:2.3:a:jenkins:email_extension:1925.v1598902b_58dd
Jenkins » Email Extension » Version: 1933.v45cec755423f

cpe:2.3:a:jenkins:email_extension:1933.v45cec755423f
Jenkins » Email Extension » Version: 2.0

cpe:2.3:a:jenkins:email_extension:2.0
Jenkins » Email Extension » Version: 2.1

cpe:2.3:a:jenkins:email_extension:2.1
Jenkins » Email Extension » Version: 2.10

cpe:2.3:a:jenkins:email_extension:2.10
Jenkins » Email Extension » Version: 2.100

cpe:2.3:a:jenkins:email_extension:2.100
Jenkins » Email Extension » Version: 2.101

cpe:2.3:a:jenkins:email_extension:2.101
Jenkins » Email Extension » Version: 2.102

cpe:2.3:a:jenkins:email_extension:2.102
Jenkins » Email Extension » Version: 2.103

cpe:2.3:a:jenkins:email_extension:2.103
Jenkins » Email Extension » Version: 2.104

cpe:2.3:a:jenkins:email_extension:2.104
Jenkins » Email Extension » Version: 2.105

cpe:2.3:a:jenkins:email_extension:2.105
Jenkins » Email Extension » Version: 2.11

cpe:2.3:a:jenkins:email_extension:2.11
Jenkins » Email Extension » Version: 2.12

cpe:2.3:a:jenkins:email_extension:2.12
Jenkins » Email Extension » Version: 2.13

cpe:2.3:a:jenkins:email_extension:2.13
Jenkins » Email Extension » Version: 2.14

cpe:2.3:a:jenkins:email_extension:2.14
Jenkins » Email Extension » Version: 2.14.1

cpe:2.3:a:jenkins:email_extension:2.14.1
Jenkins » Email Extension » Version: 2.15

cpe:2.3:a:jenkins:email_extension:2.15
Jenkins » Email Extension » Version: 2.16

cpe:2.3:a:jenkins:email_extension:2.16
Jenkins » Email Extension » Version: 2.17

cpe:2.3:a:jenkins:email_extension:2.17
Jenkins » Email Extension » Version: 2.18

cpe:2.3:a:jenkins:email_extension:2.18
Jenkins » Email Extension » Version: 2.19

cpe:2.3:a:jenkins:email_extension:2.19
Jenkins » Email Extension » Version: 2.2

cpe:2.3:a:jenkins:email_extension:2.2
Jenkins » Email Extension » Version: 2.2.1

cpe:2.3:a:jenkins:email_extension:2.2.1
Jenkins » Email Extension » Version: 2.20

cpe:2.3:a:jenkins:email_extension:2.20
Jenkins » Email Extension » Version: 2.21

cpe:2.3:a:jenkins:email_extension:2.21
Jenkins » Email Extension » Version: 2.22

cpe:2.3:a:jenkins:email_extension:2.22
Jenkins » Email Extension » Version: 2.24

cpe:2.3:a:jenkins:email_extension:2.24
Jenkins » Email Extension » Version: 2.24.1

cpe:2.3:a:jenkins:email_extension:2.24.1
Jenkins » Email Extension » Version: 2.25

cpe:2.3:a:jenkins:email_extension:2.25
Jenkins » Email Extension » Version: 2.27

cpe:2.3:a:jenkins:email_extension:2.27
Jenkins » Email Extension » Version: 2.27.1

cpe:2.3:a:jenkins:email_extension:2.27.1
Jenkins » Email Extension » Version: 2.28

cpe:2.3:a:jenkins:email_extension:2.28
Jenkins » Email Extension » Version: 2.29

cpe:2.3:a:jenkins:email_extension:2.29
Jenkins » Email Extension » Version: 2.3

cpe:2.3:a:jenkins:email_extension:2.3
Jenkins » Email Extension » Version: 2.30

cpe:2.3:a:jenkins:email_extension:2.30
Jenkins » Email Extension » Version: 2.30.1

cpe:2.3:a:jenkins:email_extension:2.30.1
Jenkins » Email Extension » Version: 2.30.2

cpe:2.3:a:jenkins:email_extension:2.30.2
Jenkins » Email Extension » Version: 2.31

cpe:2.3:a:jenkins:email_extension:2.31
Jenkins » Email Extension » Version: 2.32

cpe:2.3:a:jenkins:email_extension:2.32
Jenkins » Email Extension » Version: 2.33

cpe:2.3:a:jenkins:email_extension:2.33
Jenkins » Email Extension » Version: 2.34

cpe:2.3:a:jenkins:email_extension:2.34
Jenkins » Email Extension » Version: 2.35

cpe:2.3:a:jenkins:email_extension:2.35
Jenkins » Email Extension » Version: 2.35.1

cpe:2.3:a:jenkins:email_extension:2.35.1
Jenkins » Email Extension » Version: 2.36

cpe:2.3:a:jenkins:email_extension:2.36
Jenkins » Email Extension » Version: 2.37

cpe:2.3:a:jenkins:email_extension:2.37
Jenkins » Email Extension » Version: 2.37.1

cpe:2.3:a:jenkins:email_extension:2.37.1
Jenkins » Email Extension » Version: 2.37.2

cpe:2.3:a:jenkins:email_extension:2.37.2
Jenkins » Email Extension » Version: 2.37.2.2

cpe:2.3:a:jenkins:email_extension:2.37.2.2
Jenkins » Email Extension » Version: 2.38

cpe:2.3:a:jenkins:email_extension:2.38
Jenkins » Email Extension » Version: 2.38.1

cpe:2.3:a:jenkins:email_extension:2.38.1
Jenkins » Email Extension » Version: 2.38.2

cpe:2.3:a:jenkins:email_extension:2.38.2
Jenkins » Email Extension » Version: 2.39

cpe:2.3:a:jenkins:email_extension:2.39
Jenkins » Email Extension » Version: 2.39.2

cpe:2.3:a:jenkins:email_extension:2.39.2
Jenkins » Email Extension » Version: 2.39.3

cpe:2.3:a:jenkins:email_extension:2.39.3
Jenkins » Email Extension » Version: 2.4

cpe:2.3:a:jenkins:email_extension:2.4
Jenkins » Email Extension » Version: 2.40

cpe:2.3:a:jenkins:email_extension:2.40
Jenkins » Email Extension » Version: 2.40.1

cpe:2.3:a:jenkins:email_extension:2.40.1
Jenkins » Email Extension » Version: 2.40.2

cpe:2.3:a:jenkins:email_extension:2.40.2
Jenkins » Email Extension » Version: 2.40.3

cpe:2.3:a:jenkins:email_extension:2.40.3
Jenkins » Email Extension » Version: 2.40.4

cpe:2.3:a:jenkins:email_extension:2.40.4
Jenkins » Email Extension » Version: 2.40.5

cpe:2.3:a:jenkins:email_extension:2.40.5
Jenkins » Email Extension » Version: 2.41

cpe:2.3:a:jenkins:email_extension:2.41
Jenkins » Email Extension » Version: 2.41.2

cpe:2.3:a:jenkins:email_extension:2.41.2
Jenkins » Email Extension » Version: 2.41.3

cpe:2.3:a:jenkins:email_extension:2.41.3
Jenkins » Email Extension » Version: 2.42

cpe:2.3:a:jenkins:email_extension:2.42
Jenkins » Email Extension » Version: 2.43

cpe:2.3:a:jenkins:email_extension:2.43
Jenkins » Email Extension » Version: 2.44

cpe:2.3:a:jenkins:email_extension:2.44
Jenkins » Email Extension » Version: 2.45

cpe:2.3:a:jenkins:email_extension:2.45
Jenkins » Email Extension » Version: 2.46

cpe:2.3:a:jenkins:email_extension:2.46
Jenkins » Email Extension » Version: 2.47

cpe:2.3:a:jenkins:email_extension:2.47
Jenkins » Email Extension » Version: 2.48

cpe:2.3:a:jenkins:email_extension:2.48
Jenkins » Email Extension » Version: 2.49

cpe:2.3:a:jenkins:email_extension:2.49
Jenkins » Email Extension » Version: 2.5

cpe:2.3:a:jenkins:email_extension:2.5
Jenkins » Email Extension » Version: 2.50

cpe:2.3:a:jenkins:email_extension:2.50
Jenkins » Email Extension » Version: 2.51

cpe:2.3:a:jenkins:email_extension:2.51
Jenkins » Email Extension » Version: 2.52

cpe:2.3:a:jenkins:email_extension:2.52
Jenkins » Email Extension » Version: 2.53

cpe:2.3:a:jenkins:email_extension:2.53
Jenkins » Email Extension » Version: 2.54

cpe:2.3:a:jenkins:email_extension:2.54
Jenkins » Email Extension » Version: 2.55

cpe:2.3:a:jenkins:email_extension:2.55
Jenkins » Email Extension » Version: 2.56

cpe:2.3:a:jenkins:email_extension:2.56
Jenkins » Email Extension » Version: 2.57

cpe:2.3:a:jenkins:email_extension:2.57
Jenkins » Email Extension » Version: 2.57.1

cpe:2.3:a:jenkins:email_extension:2.57.1
Jenkins » Email Extension » Version: 2.57.2

cpe:2.3:a:jenkins:email_extension:2.57.2
Jenkins » Email Extension » Version: 2.58

cpe:2.3:a:jenkins:email_extension:2.58
Jenkins » Email Extension » Version: 2.59

cpe:2.3:a:jenkins:email_extension:2.59
Jenkins » Email Extension » Version: 2.6

cpe:2.3:a:jenkins:email_extension:2.6
Jenkins » Email Extension » Version: 2.60

cpe:2.3:a:jenkins:email_extension:2.60
Jenkins » Email Extension » Version: 2.61

cpe:2.3:a:jenkins:email_extension:2.61
Jenkins » Email Extension » Version: 2.62

cpe:2.3:a:jenkins:email_extension:2.62
Jenkins » Email Extension » Version: 2.63

cpe:2.3:a:jenkins:email_extension:2.63
Jenkins » Email Extension » Version: 2.64

cpe:2.3:a:jenkins:email_extension:2.64
Jenkins » Email Extension » Version: 2.65

cpe:2.3:a:jenkins:email_extension:2.65
Jenkins » Email Extension » Version: 2.66

cpe:2.3:a:jenkins:email_extension:2.66
Jenkins » Email Extension » Version: 2.67

cpe:2.3:a:jenkins:email_extension:2.67
Jenkins » Email Extension » Version: 2.68

cpe:2.3:a:jenkins:email_extension:2.68
Jenkins » Email Extension » Version: 2.69

cpe:2.3:a:jenkins:email_extension:2.69
Jenkins » Email Extension » Version: 2.7

cpe:2.3:a:jenkins:email_extension:2.7
Jenkins » Email Extension » Version: 2.71

cpe:2.3:a:jenkins:email_extension:2.71
Jenkins » Email Extension » Version: 2.72

cpe:2.3:a:jenkins:email_extension:2.72
Jenkins » Email Extension » Version: 2.73

cpe:2.3:a:jenkins:email_extension:2.73
Jenkins » Email Extension » Version: 2.74

cpe:2.3:a:jenkins:email_extension:2.74
Jenkins » Email Extension » Version: 2.75

cpe:2.3:a:jenkins:email_extension:2.75
Jenkins » Email Extension » Version: 2.76

cpe:2.3:a:jenkins:email_extension:2.76
Jenkins » Email Extension » Version: 2.77

cpe:2.3:a:jenkins:email_extension:2.77
Jenkins » Email Extension » Version: 2.78

cpe:2.3:a:jenkins:email_extension:2.78
Jenkins » Email Extension » Version: 2.79

cpe:2.3:a:jenkins:email_extension:2.79
Jenkins » Email Extension » Version: 2.8

cpe:2.3:a:jenkins:email_extension:2.8
Jenkins » Email Extension » Version: 2.80

cpe:2.3:a:jenkins:email_extension:2.80
Jenkins » Email Extension » Version: 2.81

cpe:2.3:a:jenkins:email_extension:2.81
Jenkins » Email Extension » Version: 2.82

cpe:2.3:a:jenkins:email_extension:2.82
Jenkins » Email Extension » Version: 2.83

cpe:2.3:a:jenkins:email_extension:2.83
Jenkins » Email Extension » Version: 2.84

cpe:2.3:a:jenkins:email_extension:2.84
Jenkins » Email Extension » Version: 2.85

cpe:2.3:a:jenkins:email_extension:2.85
Jenkins » Email Extension » Version: 2.86

cpe:2.3:a:jenkins:email_extension:2.86
Jenkins » Email Extension » Version: 2.87

cpe:2.3:a:jenkins:email_extension:2.87
Jenkins » Email Extension » Version: 2.88

cpe:2.3:a:jenkins:email_extension:2.88
Jenkins » Email Extension » Version: 2.89

cpe:2.3:a:jenkins:email_extension:2.89
Jenkins » Email Extension » Version: 2.89.0.1

cpe:2.3:a:jenkins:email_extension:2.89.0.1
Jenkins » Email Extension » Version: 2.89.0.2

cpe:2.3:a:jenkins:email_extension:2.89.0.2
Jenkins » Email Extension » Version: 2.89.1

cpe:2.3:a:jenkins:email_extension:2.89.1
Jenkins » Email Extension » Version: 2.9

cpe:2.3:a:jenkins:email_extension:2.9
Jenkins » Email Extension » Version: 2.90

cpe:2.3:a:jenkins:email_extension:2.90
Jenkins » Email Extension » Version: 2.91

cpe:2.3:a:jenkins:email_extension:2.91
Jenkins » Email Extension » Version: 2.92

cpe:2.3:a:jenkins:email_extension:2.92
Jenkins » Email Extension » Version: 2.93

cpe:2.3:a:jenkins:email_extension:2.93
Jenkins » Email Extension » Version: 2.93.1

cpe:2.3:a:jenkins:email_extension:2.93.1
Jenkins » Email Extension » Version: 2.94

cpe:2.3:a:jenkins:email_extension:2.94
Jenkins » Email Extension » Version: 2.95

cpe:2.3:a:jenkins:email_extension:2.95
Jenkins » Email Extension » Version: 2.96

cpe:2.3:a:jenkins:email_extension:2.96
Jenkins » Email Extension » Version: 2.96.1

cpe:2.3:a:jenkins:email_extension:2.96.1
Jenkins » Email Extension » Version: 2.97

cpe:2.3:a:jenkins:email_extension:2.97
Jenkins » Email Extension » Version: 2.98

cpe:2.3:a:jenkins:email_extension:2.98
Jenkins » Email Extension » Version: 2.99

cpe:2.3:a:jenkins:email_extension:2.99

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-48920

Products

Pricing

Contact Us