{"action":"Upgrade org.jenkins-ci.main:jenkins-core to 1.625.2 (1.625.x) or 1.638 (1.638.x) or later.","affected":[{"fixed":"1.625.2","introduced":"0"},{"fixed":"1.638","introduced":"1.626"}],"component":"org.jenkins-ci.main:jenkins-core","cve_ids":["CVE-2015-5317"],"ecosystem":"Maven","epss":0.23003,"exploited":true,"fixed_versions":["1.625.2","1.638"],"ghsa_id":"GHSA-8pqx-3rxx-f5pm","id":"tcs_01M5N8N5QP4YAK2SG7AH4A8MQQ","modified_at":"2025-10-22T19:26:24.704289Z","published_at":"2022-05-13T01:30:06Z","references":["https://osv.dev/vulnerability/GHSA-8pqx-3rxx-f5pm","https://nvd.nist.gov/vuln/detail/CVE-2015-5317","https://github.com/jenkinsci/jenkins/commit/0594c4cbccd24d4883fc0150e8fc511c9da63eb4","https://access.redhat.com/errata/RHSA-2016:0070","https://github.com/jenkinsci/jenkins","https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-5317","http://rhn.redhat.com/errata/RHSA-2016-0489.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-8pqx-3rxx-f5pm","url":"https://osv.dev/vulnerability/GHSA-8pqx-3rxx-f5pm"},{"source":"kev","source_id":"CVE-2015-5317","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}],"summary":"Jenkins discloses project names via fingerprints"}