{"action":"Upgrade org.jenkins-ci.plugins:email-ext to 2.94 or later.","affected":[{"fixed":"2.94","introduced":"0"}],"component":"org.jenkins-ci.plugins:email-ext","cve_ids":["CVE-2023-25763"],"ecosystem":"Maven","epss":0.00602,"exploited":false,"fixed_versions":["2.94"],"ghsa_id":"GHSA-h97r-fchm-m23x","id":"tcs_01M5N906QY4J3X6103BBBX6H4S","modified_at":"2024-02-16T08:23:52.429176Z","published_at":"2023-02-15T15:30:41Z","references":["https://osv.dev/vulnerability/GHSA-h97r-fchm-m23x","https://nvd.nist.gov/vuln/detail/CVE-2023-25763","https://github.com/jenkinsci/email-ext-plugin/commit/ebfb97475ec6491f28b88a8b5acbb99ff36f4d7f","https://github.com/jenkinsci/email-ext-plugin","https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-2931","http://www.openwall.com/lists/oss-security/2023/02/15/4"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-h97r-fchm-m23x","url":"https://osv.dev/vulnerability/GHSA-h97r-fchm-m23x"}],"summary":"Cross-site Scripting in Jenkins Email Extension Plugin"}