{"action":"Upgrade org.jenkins-ci.plugins:email-ext to 2.94 or later.","affected":[{"fixed":"2.94","introduced":"0"}],"component":"org.jenkins-ci.plugins:email-ext","cve_ids":["CVE-2023-25765"],"ecosystem":"Maven","epss":0.01095,"exploited":false,"fixed_versions":["2.94"],"ghsa_id":"GHSA-c9c2-wcxh-3w5j","id":"tcs_01M5N8S136SCCRX8A9G0Y3DK8K","modified_at":"2024-02-16T08:00:10.636638Z","published_at":"2023-02-15T15:30:40Z","references":["https://osv.dev/vulnerability/GHSA-c9c2-wcxh-3w5j","https://nvd.nist.gov/vuln/detail/CVE-2023-25765","https://github.com/jenkinsci/email-ext-plugin/commit/ffe44a4c1c1830325787d7ef5e9e19ebf9a936f9","https://github.com/jenkinsci/email-ext-plugin","https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2939","http://www.openwall.com/lists/oss-security/2023/02/15/4"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-c9c2-wcxh-3w5j","url":"https://osv.dev/vulnerability/GHSA-c9c2-wcxh-3w5j"}],"summary":"Sandbox escape in Jenkins Email Extension Plugin"}