{"action":"Upgrade org.jenkins-ci.plugins:sonar-gerrit to 378.vf4646d4df087 or later.","affected":[{"fixed":"378.vf4646d4df087","introduced":"0"}],"component":"org.jenkins-ci.plugins:sonar-gerrit","cve_ids":["CVE-2022-46688"],"ecosystem":"Maven","epss":0.00458,"exploited":false,"fixed_versions":["378.vf4646d4df087"],"ghsa_id":"GHSA-m82g-fv7v-h64m","id":"tcs_01M5N94NVRC702F6Q7YVA5H3W6","modified_at":"2024-02-16T08:18:26.938301Z","published_at":"2022-12-12T09:30:35Z","references":["https://osv.dev/vulnerability/GHSA-m82g-fv7v-h64m","https://nvd.nist.gov/vuln/detail/CVE-2022-46688","https://github.com/jenkinsci/sonar-gerrit-plugin/commit/f4646d4df0870bd06b76de86309bb38fbd929d54","https://github.com/jenkinsci/sonar-gerrit-plugin","https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-1002"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-m82g-fv7v-h64m","url":"https://osv.dev/vulnerability/GHSA-m82g-fv7v-h64m"}],"summary":"Jenkins Sonar Gerrit Plugin vulnerable to Cross-Site Request Forgery"}