{"action":"Upgrade org.jenkins-ci.plugins:script-security to 1.50 or later.","affected":[{"fixed":"1.50","introduced":"0"}],"component":"org.jenkins-ci.plugins:script-security","cve_ids":["CVE-2019-1003000"],"ecosystem":"Maven","epss":0.98375,"exploited":false,"fixed_versions":["1.50"],"ghsa_id":"GHSA-784j-h234-m56x","id":"tcs_01M5N8HVKVXA8KE2HAZS3N6PXW","modified_at":"2024-02-20T05:38:11.892329Z","published_at":"2022-05-13T01:15:19Z","references":["https://osv.dev/vulnerability/GHSA-784j-h234-m56x","https://nvd.nist.gov/vuln/detail/CVE-2019-1003000","https://github.com/jenkinsci/script-security-plugin/commit/2c5122e50742dd16492f9424992deb21cc07837c","https://access.redhat.com/errata/RHBA-2019:0326","https://access.redhat.com/errata/RHBA-2019:0327","https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266","https://www.exploit-db.com/exploits/46453","https://www.exploit-db.com/exploits/46572","http://packetstormsecurity.com/files/152132/Jenkins-ACL-Bypass-Metaprogramming-Remote-Code-Execution.html","http://www.rapid7.com/db/modules/exploit/multi/http/jenkins_metaprogramming"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-784j-h234-m56x","url":"https://osv.dev/vulnerability/GHSA-784j-h234-m56x"}],"summary":"Protection Mechanism Failure in Jenkins Script Security Plugin"}