{"action":"Upgrade org.jenkins-ci.plugins:support-core to 2.72.1 or later.","affected":[{"fixed":"2.72.1","introduced":"0"}],"component":"org.jenkins-ci.plugins:support-core","cve_ids":["CVE-2021-21621"],"ecosystem":"Maven","epss":0.01206,"exploited":false,"fixed_versions":["2.72.1"],"ghsa_id":"GHSA-92pg-8g57-hqpx","id":"tcs_01M5N8NVE4XS7Z71NZFXDSHPND","modified_at":"2024-02-16T08:21:56.290313Z","published_at":"2022-05-24T17:43:01Z","references":["https://osv.dev/vulnerability/GHSA-92pg-8g57-hqpx","https://nvd.nist.gov/vuln/detail/CVE-2021-21621","https://github.com/jenkinsci/support-core-plugin/commit/9af9efae6e9ed408ca89ff9b5f1b7a74da0a131f","https://github.com/jenkinsci/support-core-plugin","https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2150"],"severity":{"label":"low","score":3.1},"sources":[{"source":"osv","source_id":"GHSA-92pg-8g57-hqpx","url":"https://osv.dev/vulnerability/GHSA-92pg-8g57-hqpx"}],"summary":"Support bundles can include user session IDs in Jenkins Support Core Plugin"}