{"action":"Upgrade com.veracode.jenkins:veracode-scan to 23.3.19.0 or later.","affected":[{"fixed":"23.3.19.0","introduced":"0"}],"component":"com.veracode.jenkins:veracode-scan","cve_ids":["CVE-2023-25722"],"ecosystem":"Maven","epss":0.00206,"exploited":false,"fixed_versions":["23.3.19.0"],"ghsa_id":"GHSA-fjrv-vx9m-4jpj","id":"tcs_01M5N8W8NY725EE4SEW7KTZFWT","modified_at":"2023-11-08T04:11:54.761213Z","published_at":"2023-03-28T21:30:20Z","references":["https://osv.dev/vulnerability/GHSA-fjrv-vx9m-4jpj","https://nvd.nist.gov/vuln/detail/CVE-2023-25722","https://community.veracode.com/s/global-search/CVE-2023-25722","https://docs.veracode.com/updates/r/c_all_int#veracode-jenkins-plugin-233190","https://github.com/jenkinsci/veracode-scan-plugin","https://veracode.com"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-fjrv-vx9m-4jpj","url":"https://osv.dev/vulnerability/GHSA-fjrv-vx9m-4jpj"}],"summary":"Veracode Scan Jenkins Plugin vulnerable to information disclosure"}