{"action":"Upgrade org.jenkins-ci.main:jenkins-core to 1.424.5 (1.424.x) or 1.454 (1.454.x) or later.","affected":[{"fixed":"1.454","introduced":"1.425"},{"fixed":"1.424.5","introduced":"0"}],"component":"org.jenkins-ci.main:jenkins-core","cve_ids":["CVE-2012-0325"],"ecosystem":"Maven","epss":0.01032,"exploited":false,"fixed_versions":["1.454","1.424.5"],"ghsa_id":"GHSA-cc55-c9j4-m7cx","id":"tcs_01M5N8S4K4B77KE6442D6EMS12","modified_at":"2025-03-13T18:40:18.841189Z","published_at":"2022-05-04T00:29:23Z","references":["https://osv.dev/vulnerability/GHSA-cc55-c9j4-m7cx","https://nvd.nist.gov/vuln/detail/CVE-2012-0325","https://github.com/jenkinsci/jenkins","https://web.archive.org/web/20200229025003/http://www.securityfocus.com/bid/52384","http://jvn.jp/en/jp/JVN79950061/index.html","http://jvndb.jvn.jp/jvndb/JVNDB-2012-000023","http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-03-05.cb"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-cc55-c9j4-m7cx","url":"https://osv.dev/vulnerability/GHSA-cc55-c9j4-m7cx"}],"summary":"Jenkins allows Cross-Site Scripting (XSS)"}