{"action":"Upgrade org.jenkins-ci.plugins:lucene-search to 398.v3dfa_cb_223984 or later.","affected":[{"fixed":"398.v3dfa_cb_223984","introduced":"0"}],"component":"org.jenkins-ci.plugins:lucene-search","cve_ids":["CVE-2023-30529"],"ecosystem":"Maven","epss":0.00349,"exploited":false,"fixed_versions":["398.v3dfa_cb_223984"],"ghsa_id":"GHSA-gh5w-gffh-68pr","id":"tcs_01M5N8Y9RCSA9C3Y1H6A5G37RF","modified_at":"2024-02-16T08:20:39.887345Z","published_at":"2023-04-12T18:30:36Z","references":["https://osv.dev/vulnerability/GHSA-gh5w-gffh-68pr","https://nvd.nist.gov/vuln/detail/CVE-2023-30529","https://github.com/jenkinsci/lucene-search-plugin/commit/828f79fedbe3da08b17937a85b98b5d7f499a8dd","https://github.com/jenkinsci/lucene-search-plugin/commit/ffd691642b8dda63b55cfc7e73993336554dbcb2","https://www.jenkins.io/security/advisory/2023-04-12/#SECURITY-3013","http://www.openwall.com/lists/oss-security/2023/04/13/3"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-gh5w-gffh-68pr","url":"https://osv.dev/vulnerability/GHSA-gh5w-gffh-68pr"}],"summary":"Jenkins Lucene-Search Plugin vulnerable to Cross-Site Request Forgery"}