description: A cross-site request forgery (CSRF) vulnerability in Jenkins Email Extension Plugin allows attackers to make another user stop watching an attacker-specified job.
affected:
{
defaultStatus: affected
product: Jenkins Email Extension Plugin
vendor: Jenkins Project
versions:
lessThan: *, status: unaffected, version: 2.96.1, versionType: maven
lessThan: 2.89.0.*, status: unaffected, version: 2.89.0.2, versionType: maven
}