{"action":"Upgrade com.sonymobile.jenkins.plugins.mq:mq-notifier to 1.4.1 or later.","affected":[{"fixed":"1.4.1","introduced":"0"}],"component":"com.sonymobile.jenkins.plugins.mq:mq-notifier","cve_ids":["CVE-2024-28154"],"ecosystem":"Maven","epss":0.00679,"exploited":false,"fixed_versions":["1.4.1"],"ghsa_id":"GHSA-8fm4-r23p-v68v","id":"tcs_01M5N8MJTX26WQ7QGG2VQ31JR5","modified_at":"2025-03-28T00:10:20.548378Z","published_at":"2024-03-06T18:30:38Z","references":["https://osv.dev/vulnerability/GHSA-8fm4-r23p-v68v","https://nvd.nist.gov/vuln/detail/CVE-2024-28154","https://github.com/jenkinsci/mq-notifier-plugin/commit/46c9f228a3317eb87562bc3d99f7e184bdcecbfe","https://github.com/jenkinsci/mq-notifier-plugin","https://www.jenkins.io/security/advisory/2024-03-06/#SECURITY-3180","http://www.openwall.com/lists/oss-security/2024/03/06/3"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-8fm4-r23p-v68v","url":"https://osv.dev/vulnerability/GHSA-8fm4-r23p-v68v"}],"summary":"Jenkins MQ Notifier Plugin exposes sensitive information in build logs"}