{"action":"Upgrade org.jenkins-ci.main:jenkins-core to 2.46.2 (2.46.x) or 2.57 (2.57.x) or later.","affected":[{"fixed":"2.57","introduced":"2.50"},{"fixed":"2.46.2","introduced":"0"}],"component":"org.jenkins-ci.main:jenkins-core","cve_ids":["CVE-2017-1000356"],"ecosystem":"Maven","epss":0.06957,"exploited":false,"fixed_versions":["2.57","2.46.2"],"ghsa_id":"GHSA-85wq-pqhp-hmq6","id":"tcs_01M5N8KXT79BC60DK3403EYD37","modified_at":"2024-02-20T05:34:15.178161Z","published_at":"2022-05-14T03:44:36Z","references":["https://osv.dev/vulnerability/GHSA-85wq-pqhp-hmq6","https://nvd.nist.gov/vuln/detail/CVE-2017-1000356","https://github.com/jenkinsci/jenkins/commit/23f4809e6c10a221e9d67f2e841536845387b42d","https://github.com/jenkinsci/jenkins/commit/3c5e5ca63d9a1ac1c4087682dc0d426625eafed8","https://github.com/jenkinsci/jenkins/commit/e69c28e44dae41322112471e1c80f840bde314d4","https://github.com/jenkinsci/jenkins","https://jenkins.io/security/advisory/2017-04-26","http://www.securityfocus.com/bid/98062"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-85wq-pqhp-hmq6","url":"https://osv.dev/vulnerability/GHSA-85wq-pqhp-hmq6"}],"summary":"Cross-Site Request Forgery in Jenkins"}