cpe:/a:jenkins:email_extension_template:1.0::~~~jenkins~~ CVE-2018-1000417 2019-01-09T18:29:02.637-05:00 2019-01-22T09:36:27.463-05:00 5.8 NETWORK MEDIUM NONE NONE PARTIAL PARTIAL http://nvd.nist.gov 2019-01-15T12:56:41.410-05:00 BID 106532 CONFIRM https://jenkins.io/security/advisory/2018-09-25/#SECURITY-1125 A cross-site request forgery vulnerability exists in Jenkins Email Extension Template Plugin 1.0 and earlier in ExtEmailTemplateManagement.java that allows creating or removing templates.