{"action":"Upgrade org.jenkins-ci.plugins:keycloak to 2.3.1 or later.","affected":[{"fixed":"2.3.1","introduced":"0"}],"component":"org.jenkins-ci.plugins:keycloak","cve_ids":["CVE-2023-24457"],"ecosystem":"Maven","epss":0.01,"exploited":false,"fixed_versions":["2.3.1"],"ghsa_id":"GHSA-9wrr-4r9v-26xc","id":"tcs_01M5N8QYY2GMPDB4D613GEA8B3","modified_at":"2024-02-16T08:19:51.208506Z","published_at":"2023-01-26T21:30:17Z","references":["https://osv.dev/vulnerability/GHSA-9wrr-4r9v-26xc","https://nvd.nist.gov/vuln/detail/CVE-2023-24457","https://github.com/jenkinsci/keycloak-plugin/commit/e48da7b12473510092de6f74db29298171a30b7e","https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-2986"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-9wrr-4r9v-26xc","url":"https://osv.dev/vulnerability/GHSA-9wrr-4r9v-26xc"}],"summary":"CSRF vulnerability in Jenkins Keycloak Authentication Plugin"}