{"action":"Upgrade org.jenkins-ci.plugins:cas-plugin to 1.6.3 or later.","affected":[{"fixed":"1.6.3","introduced":"0"}],"component":"org.jenkins-ci.plugins:cas-plugin","cve_ids":["CVE-2023-32997"],"ecosystem":"Maven","epss":0.00794,"exploited":false,"fixed_versions":["1.6.3"],"ghsa_id":"GHSA-hjh8-9gxh-cx4x","id":"tcs_01M5N90WMM2X10WM41EY0WNN53","modified_at":"2024-02-16T08:17:50.793369Z","published_at":"2023-05-16T18:30:16Z","references":["https://osv.dev/vulnerability/GHSA-hjh8-9gxh-cx4x","https://nvd.nist.gov/vuln/detail/CVE-2023-32997","https://github.com/jenkinsci/cas-plugin/commit/3a33cc0175bcc18801faf9125afb38d495b5995f","https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3000"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-hjh8-9gxh-cx4x","url":"https://osv.dev/vulnerability/GHSA-hjh8-9gxh-cx4x"}],"summary":"Jenkins CAS Plugin Session Fixation vulnerability"}