{"action":"Upgrade com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer to 1.5.1 or later.","affected":[{"fixed":"1.5.1","introduced":"0"}],"component":"com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer","cve_ids":["CVE-2013-6374"],"ecosystem":"Maven","epss":0.00967,"exploited":false,"fixed_versions":["1.5.1"],"ghsa_id":"GHSA-h52h-972r-68mh","id":"tcs_01M5N8ZPZRJWGZ1VDW75SSNVDF","modified_at":"2025-03-13T19:28:46.144696Z","published_at":"2022-05-17T03:51:00Z","references":["https://osv.dev/vulnerability/GHSA-h52h-972r-68mh","https://nvd.nist.gov/vuln/detail/CVE-2013-6374","https://github.com/jenkinsci/build-failure-analyzer-plugin/commit/cf20a8df11e71e8652180d9fafd9bb47385067c7","https://github.com/jenkinsci/build-failure-analyzer-plugin","https://wiki.jenkins-ci.org/display/JENKINS/Build+Failure+Analyzer","https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-11-20"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-h52h-972r-68mh","url":"https://osv.dev/vulnerability/GHSA-h52h-972r-68mh"}],"summary":"Jenkins Build Failure Analyzer Plugin allows Cross-Site Scripting (XSS)"}