{"action":"Upgrade org.jenkins-ci.plugins:s3 to the fixed version for your line (see fixed_versions).","affected":[{"fixed":"0.11.7","introduced":"0.11.6"},{"fixed":"0.11.5.1","introduced":"0"}],"component":"org.jenkins-ci.plugins:s3","cve_ids":["CVE-2021-21650"],"ecosystem":"Maven","epss":0.00712,"exploited":false,"fixed_versions":["0.11.7","0.11.5.1"],"ghsa_id":"GHSA-fvfc-8pqr-wjpv","id":"tcs_01M5N8WRAZKQQB9FW9YH6Z9PYX","modified_at":"2024-02-16T08:06:10.030963Z","published_at":"2021-06-16T17:29:08Z","references":["https://osv.dev/vulnerability/GHSA-fvfc-8pqr-wjpv","https://nvd.nist.gov/vuln/detail/CVE-2021-21650","https://github.com/jenkinsci/s3-plugin/commit/a146c28c849ffe643ece46eaa5940d1fd6ab048e","https://github.com/CVEProject/cvelist/blob/2d78eb36f4d084db7fb35f1535d8d84fdcb7d859/2021/21xxx/CVE-2021-21650.json","https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2200"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-fvfc-8pqr-wjpv","url":"https://osv.dev/vulnerability/GHSA-fvfc-8pqr-wjpv"}],"summary":"Missing Authorization in Jenkins S3 publisher Plugin"}