CVE-2017-2651

CVE-2017-2651 affects the Jenkins Mailer Plugin prior to version 1.20, allowing for information disclosure. The vulnerability arises when sending emails to dynamically generated lists based on changelogs, potentially exposing email addresses to unauthorized individuals, including those without Jenkins accounts or project involvement. This is a low-severity vulnerability with a CVSS score of 3.7, indicating a network attack vector with high attack complexity and a low impact on confidentiality. There is no evidence of active exploitation, no known public exploit code, and minimal community discussion or media coverage surrounding this CVE.