{"action":"Upgrade org.jvnet.hudson.plugins:jabber to 1.42 or later.","affected":[{"fixed":"1.42","introduced":"0"}],"component":"org.jvnet.hudson.plugins:jabber","cve_ids":["CVE-2021-21634"],"ecosystem":"Maven","epss":0.00835,"exploited":false,"fixed_versions":["1.42"],"ghsa_id":"GHSA-79r5-rhrw-7pvh","id":"tcs_01M5N8J0KJ3CSDQEJRYVYAVYHY","modified_at":"2024-02-16T08:11:00.007690Z","published_at":"2022-05-24T17:45:47Z","references":["https://osv.dev/vulnerability/GHSA-79r5-rhrw-7pvh","https://nvd.nist.gov/vuln/detail/CVE-2021-21634","https://github.com/jenkinsci/jabber-plugin/commit/67882cfd189d6d05ad39e043edbfbf079dc37677","https://github.com/jenkinsci/jabber-plugin","https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2162","http://www.openwall.com/lists/oss-security/2021/03/30/1"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-79r5-rhrw-7pvh","url":"https://osv.dev/vulnerability/GHSA-79r5-rhrw-7pvh"}],"summary":"Passwords stored in plain text by Jenkins Jabber (XMPP) notifier and control Plugin"}