{"action":"Upgrade org.jenkins-ci.main:jenkins-core to 2.414.2 (2.414.x) or 2.424 (2.424.x) or later.","affected":[{"fixed":"2.414.2","introduced":"2.50"},{"fixed":"2.424","introduced":"2.415"}],"component":"org.jenkins-ci.main:jenkins-core","cve_ids":["CVE-2023-43498"],"ecosystem":"Maven","epss":0.00966,"exploited":false,"fixed_versions":["2.414.2","2.424"],"ghsa_id":"GHSA-hq87-h4jg-vxfw","id":"tcs_01M5N91400DJM70DB9JZ1A2MR1","modified_at":"2024-09-25T18:01:15.934458Z","published_at":"2023-09-20T18:30:21Z","references":["https://osv.dev/vulnerability/GHSA-hq87-h4jg-vxfw","https://nvd.nist.gov/vuln/detail/CVE-2023-43498","https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3073","http://www.openwall.com/lists/oss-security/2023/09/20/5"],"severity":{"label":"low","score":3.6},"sources":[{"source":"osv","source_id":"GHSA-hq87-h4jg-vxfw","url":"https://osv.dev/vulnerability/GHSA-hq87-h4jg-vxfw"}],"summary":"Jenkins temporary uploaded file created with insecure permissions"}