{"action":"Upgrade org.jenkins-ci.main:jenkins-core to 2.452.4 (2.452.x), 2.462.1 (2.462.x) or 2.471 (2.471.x) or later.","affected":[{"fixed":"2.452.4","introduced":"0"},{"fixed":"2.462.1","introduced":"2.460"},{"fixed":"2.471","introduced":"2.470"}],"component":"org.jenkins-ci.main:jenkins-core","cve_ids":["CVE-2024-43045"],"ecosystem":"Maven","epss":0.02869,"exploited":false,"fixed_versions":["2.452.4","2.462.1","2.471"],"ghsa_id":"GHSA-8pv9-qh96-9hc6","id":"tcs_01M5N8N66N2GYDBPZ49E8RHGB4","modified_at":"2026-08-07T08:12:28.790548377Z","published_at":"2024-08-07T15:30:42Z","references":["https://osv.dev/vulnerability/GHSA-8pv9-qh96-9hc6","https://nvd.nist.gov/vuln/detail/CVE-2024-43045","https://github.com/jenkinsci/jenkins/commit/0c13259cebc6a780fee7825838f4dd98ece8e68a","https://github.com/jenkinsci/jenkins/commit/3752f406bfef764e4954238acf44343169ae5799","https://github.com/jenkinsci/jenkins/commit/efece77d759b38c95b39b191051a8203bbc2f428","https://github.com/jenkinsci/jenkins","https://www.jenkins.io/security/advisory/2024-08-07/#SECURITY-3349"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-8pv9-qh96-9hc6","url":"https://osv.dev/vulnerability/GHSA-8pv9-qh96-9hc6"}],"summary":"Jenkins does not perform a permission check in an HTTP endpoint"}