{"action":"Upgrade org.jenkins-ci.plugins.workflow:workflow-multibranch to 707.v71c3f0a_6ccdb or later.","affected":[{"fixed":"707.v71c3f0a_6ccdb","introduced":"0"}],"component":"org.jenkins-ci.plugins.workflow:workflow-multibranch","cve_ids":["CVE-2022-25175"],"ecosystem":"Maven","epss":0.01404,"exploited":false,"fixed_versions":["707.v71c3f0a_6ccdb"],"ghsa_id":"GHSA-pj84-qjm3-77mg","id":"tcs_01M5N97MJPNKWQXE4YP79M57PE","modified_at":"2024-02-16T08:09:09.598186Z","published_at":"2022-02-16T00:01:36Z","references":["https://osv.dev/vulnerability/GHSA-pj84-qjm3-77mg","https://nvd.nist.gov/vuln/detail/CVE-2022-25175","https://github.com/jenkinsci/workflow-multibranch-plugin/commit/71c3f0a6ccdb2ba43f43686826b0d62160df85e8","https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-2463"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-pj84-qjm3-77mg","url":"https://osv.dev/vulnerability/GHSA-pj84-qjm3-77mg"}],"summary":"Jenkins Pipeline: Multibranch Plugin vulnerable to OS Command Injection"}