{"action":"Upgrade org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view to 2.24.2 (2.24.x) or 2.27 (2.27.x) or later.","affected":[{"fixed":"2.27","introduced":"2.25"},{"fixed":"2.24.2","introduced":"0"}],"component":"org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view","cve_ids":["CVE-2022-43408"],"ecosystem":"Maven","epss":0.00544,"exploited":false,"fixed_versions":["2.27","2.24.2"],"ghsa_id":"GHSA-g975-f26h-93g8","id":"tcs_01M5N8XW9G09475FQ7CDV2TK81","modified_at":"2024-02-16T08:24:10.335327Z","published_at":"2022-10-19T19:00:18Z","references":["https://osv.dev/vulnerability/GHSA-g975-f26h-93g8","https://nvd.nist.gov/vuln/detail/CVE-2022-43408","https://github.com/jenkinsci/pipeline-stage-view-plugin/commit/cee275109ee748fa9f599ec60159807a28a2933f","https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2828","http://www.openwall.com/lists/oss-security/2022/10/19/3"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-g975-f26h-93g8","url":"https://osv.dev/vulnerability/GHSA-g975-f26h-93g8"}],"summary":"Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins"}