{"action":"Upgrade org.jenkins-ci.plugins:global-build-stats to 347.v32a or later.","affected":[{"fixed":"347.v32a","introduced":"0"}],"component":"org.jenkins-ci.plugins:global-build-stats","cve_ids":["CVE-2025-58459"],"ecosystem":"Maven","epss":0.00283,"exploited":false,"fixed_versions":["347.v32a"],"ghsa_id":"GHSA-gm8g-fh49-qq6v","id":"tcs_01M5N8YH021T0RA329K4S4931N","modified_at":"2025-11-05T20:51:58.480395Z","published_at":"2025-09-03T15:30:34Z","references":["https://osv.dev/vulnerability/GHSA-gm8g-fh49-qq6v","https://nvd.nist.gov/vuln/detail/CVE-2025-58459","https://github.com/jenkinsci/global-build-stats-plugin/commit/32aeb0493c4ff5423448576f477ac612f7a25138","https://github.com/jenkinsci/global-build-stats-plugin","https://www.jenkins.io/security/advisory/2025-09-03/#SECURITY-3535","http://www.openwall.com/lists/oss-security/2025/09/03/4"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-gm8g-fh49-qq6v","url":"https://osv.dev/vulnerability/GHSA-gm8g-fh49-qq6v"}],"summary":"Jenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated"}