{"action":"Upgrade org.jvnet.hudson.plugins:favorite to 2.4.1 or later.","affected":[{"fixed":"2.4.1","introduced":"0"}],"component":"org.jvnet.hudson.plugins:favorite","cve_ids":["CVE-2022-27196"],"ecosystem":"Maven","epss":0.00824,"exploited":false,"fixed_versions":["2.4.1"],"ghsa_id":"GHSA-874r-46c6-7p4r","id":"tcs_01M5N8M3Y3XJK2FTYHCVKXZ20Z","modified_at":"2024-02-16T08:22:02.326726Z","published_at":"2022-03-16T00:00:45Z","references":["https://osv.dev/vulnerability/GHSA-874r-46c6-7p4r","https://nvd.nist.gov/vuln/detail/CVE-2022-27196","https://github.com/jenkinsci/favorite-plugin/commit/543a4d87c4fade02173f793905a99adec517bc3b","https://github.com/jenkinsci/favorite-plugin","https://www.jenkins.io/security/advisory/2022-03-15/#SECURITY-2557","http://www.openwall.com/lists/oss-security/2022/03/15/2"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-874r-46c6-7p4r","url":"https://osv.dev/vulnerability/GHSA-874r-46c6-7p4r"}],"summary":"Stored Cross-site Scripting vulnerability in Jenkins Favorite Plugin"}