{"action":"Upgrade org.jenkins-ci.main:jenkins-core to 1.565.3 (1.565.x) or 1.583 (1.583.x) or later.","affected":[{"fixed":"1.583","introduced":"1.566"},{"fixed":"1.565.3","introduced":"0"}],"component":"org.jenkins-ci.main:jenkins-core","cve_ids":["CVE-2014-3666"],"ecosystem":"Maven","epss":0.03652,"exploited":false,"fixed_versions":["1.583","1.565.3"],"ghsa_id":"GHSA-fvfh-8mj3-23xj","id":"tcs_01M5N8WRF0EF5PZ978T038TWNQ","modified_at":"2025-03-13T19:28:46.369086Z","published_at":"2022-05-17T03:53:34Z","references":["https://osv.dev/vulnerability/GHSA-fvfh-8mj3-23xj","https://nvd.nist.gov/vuln/detail/CVE-2014-3666","https://github.com/jenkinsci/jenkins/commit/be195b0e19343bff6d966029d8eea99b2c039c32","https://access.redhat.com/errata/RHSA-2016:0070","https://github.com/jenkinsci/jenkins","https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2014-10-01"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-fvfh-8mj3-23xj","url":"https://osv.dev/vulnerability/GHSA-fvfh-8mj3-23xj"}],"summary":"Jenkins allows for Code Execution via Crafted Packet to the CLI"}