{"action":"Upgrade org.jenkins-ci.plugins:fstrigger to 0.41 or later.","affected":[{"fixed":"0.41","introduced":"0"}],"component":"org.jenkins-ci.plugins:fstrigger","cve_ids":["CVE-2021-21657"],"ecosystem":"Maven","epss":0.01596,"exploited":false,"fixed_versions":["0.41"],"ghsa_id":"GHSA-cphv-7cxw-5hcc","id":"tcs_01M5N8SXT3TCRPC25BHX285QV2","modified_at":"2024-02-16T08:06:28.696737Z","published_at":"2022-05-24T19:03:11Z","references":["https://osv.dev/vulnerability/GHSA-cphv-7cxw-5hcc","https://nvd.nist.gov/vuln/detail/CVE-2021-21657","https://github.com/jenkinsci/fstrigger-plugin","https://www.jenkins.io/security/advisory/2021-05-25/#SECURITY-2339","http://www.openwall.com/lists/oss-security/2021/05/25/3"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-cphv-7cxw-5hcc","url":"https://osv.dev/vulnerability/GHSA-cphv-7cxw-5hcc"}],"summary":"XXE vulnerability in Jenkins Filesystem Trigger Plugin"}