{"action":"Upgrade com.veracode.jenkins:veracode-scan to 23.3.19.0 or later.","affected":[{"fixed":"23.3.19.0","introduced":"0"}],"component":"com.veracode.jenkins:veracode-scan","cve_ids":["CVE-2023-25721"],"ecosystem":"Maven","epss":0.00647,"exploited":false,"fixed_versions":["23.3.19.0"],"ghsa_id":"GHSA-c4jr-vjm4-27hq","id":"tcs_01M5N8RF243NMPK8G3DSA2Y6XG","modified_at":"2023-11-08T04:11:54.698150Z","published_at":"2023-03-28T21:30:20Z","references":["https://osv.dev/vulnerability/GHSA-c4jr-vjm4-27hq","https://nvd.nist.gov/vuln/detail/CVE-2023-25721","https://community.veracode.com/s/spotlight/frequently-asked-questions-for-cve-2023-25721-and-cve-2023-25722-MCFT34TH6OGRFR7F7JGDQQP4TNZE","https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190","https://github.com/jenkinsci/veracode-scan-plugin","https://veracode.com"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"GHSA-c4jr-vjm4-27hq","url":"https://osv.dev/vulnerability/GHSA-c4jr-vjm4-27hq"}],"summary":"Veracode Scan Jenkins Plugin vulnerable to information disclosure"}