{"action":"Upgrade org.jenkins-ci.plugins:script-security to 1184.v85d16b_d851b_3 or later.","affected":[{"fixed":"1184.v85d16b_d851b_3","introduced":"0"}],"component":"org.jenkins-ci.plugins:script-security","cve_ids":["CVE-2022-43403"],"ecosystem":"Maven","epss":0.0189,"exploited":false,"fixed_versions":["1184.v85d16b_d851b_3"],"ghsa_id":"GHSA-f6mq-6fx5-w2ch","id":"tcs_01M5N8V9HRMRTM4DH79Q6V4A96","modified_at":"2024-02-19T05:26:18.858843Z","published_at":"2022-10-19T19:00:21Z","references":["https://osv.dev/vulnerability/GHSA-f6mq-6fx5-w2ch","https://nvd.nist.gov/vuln/detail/CVE-2022-43403","https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2824%20(1)","https://www.secpod.com/blog/oracle-releases-critical-security-updates-january-2023-patch-now","http://www.openwall.com/lists/oss-security/2022/10/19/3"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-f6mq-6fx5-w2ch","url":"https://osv.dev/vulnerability/GHSA-f6mq-6fx5-w2ch"}],"summary":"Jenkins Script Security Plugin sandbox bypass vulnerability"}