{"action":"Upgrade io.jenkins.plugins:opentelemetry to 3.1543.1545.vf5a or later.","affected":[{"fixed":"3.1543.1545.vf5a","introduced":"0"}],"component":"io.jenkins.plugins:opentelemetry","cve_ids":["CVE-2025-58460"],"ecosystem":"Maven","epss":0.00247,"exploited":false,"fixed_versions":["3.1543.1545.vf5a"],"ghsa_id":"GHSA-f696-867g-2759","id":"tcs_01M5N8V64V6S9907RPJAQK183P","modified_at":"2025-11-05T21:06:50.587578Z","published_at":"2025-09-03T15:30:34Z","references":["https://osv.dev/vulnerability/GHSA-f696-867g-2759","https://nvd.nist.gov/vuln/detail/CVE-2025-58460","https://github.com/jenkinsci/opentelemetry-plugin/commit/f5a4ec123769096ad9a4930ede56588b0fee40f3","https://github.com/jenkinsci/opentelemetry-plugin","https://github.com/jenkinsci/opentelemetry-plugin/releases/tag/3.1543.1545.vf5a_4ec123769","https://www.jenkins.io/security/advisory/2025-09-03/#SECURITY-3602","http://www.openwall.com/lists/oss-security/2025/09/03/4"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-f696-867g-2759","url":"https://osv.dev/vulnerability/GHSA-f696-867g-2759"}],"summary":"Jenkins OpenTelemetry Plugin missing permission check allows capturing credentials"}