{"action":"Upgrade org.jenkins-ci.plugins:metrics to the fixed version for your line (see fixed_versions).","affected":[{"fixed":"4.0.2.8.1","introduced":"4.0.2.8"},{"fixed":"4.0.2.7.1","introduced":"0"}],"component":"org.jenkins-ci.plugins:metrics","cve_ids":["CVE-2022-20621"],"ecosystem":"Maven","epss":0.00329,"exploited":false,"fixed_versions":["4.0.2.8.1","4.0.2.7.1"],"ghsa_id":"GHSA-gg9m-x3cg-69vh","id":"tcs_01M5N8Y80KG4PH28FHAN138VTE","modified_at":"2024-02-16T08:16:06.852509Z","published_at":"2022-01-13T00:00:57Z","references":["https://osv.dev/vulnerability/GHSA-gg9m-x3cg-69vh","https://nvd.nist.gov/vuln/detail/CVE-2022-20621","https://github.com/jenkinsci/metrics-plugin/commit/9810480370d4c5e04a2b710934db5461bde0d1b6","https://github.com/jenkinsci/metrics-plugin","https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1624","http://www.openwall.com/lists/oss-security/2022/01/12/6"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-gg9m-x3cg-69vh","url":"https://osv.dev/vulnerability/GHSA-gg9m-x3cg-69vh"}],"summary":"Access key stored in plain text by Jenkins Metrics Plugin"}