{"action":"Upgrade io.jenkins.blueocean:blueocean-parent to 1.25.4 or later.","affected":[{"fixed":"1.25.4","introduced":"0"}],"component":"io.jenkins.blueocean:blueocean-parent","cve_ids":["CVE-2022-30953"],"ecosystem":"Maven","epss":0.00727,"exploited":false,"fixed_versions":["1.25.4"],"ghsa_id":"GHSA-hgpq-42pf-9vfq","id":"tcs_01M5N90N6JEWCKEW077DWRG9Q3","modified_at":"2024-02-16T08:39:55.025685Z","published_at":"2022-05-18T00:00:40Z","references":["https://osv.dev/vulnerability/GHSA-hgpq-42pf-9vfq","https://nvd.nist.gov/vuln/detail/CVE-2022-30953","https://github.com/jenkinsci/blueocean-plugin/commit/9f44b895d018c514d5dccc1f2190a2a029e58259","https://github.com/jenkinsci/blueocean-plugin","https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2502","http://www.openwall.com/lists/oss-security/2022/05/17/8"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-hgpq-42pf-9vfq","url":"https://osv.dev/vulnerability/GHSA-hgpq-42pf-9vfq"}],"summary":"Cross Site Request Forgery in Jenkins Blue Ocean Plugin"}