{"action":"Upgrade org.jenkins-ci.plugins:azure-vm-agents to 853.v4a or later.","affected":[{"fixed":"853.v4a","introduced":"0"}],"component":"org.jenkins-ci.plugins:azure-vm-agents","cve_ids":["CVE-2023-32988"],"ecosystem":"Maven","epss":0.00503,"exploited":false,"fixed_versions":["853.v4a"],"ghsa_id":"GHSA-q77x-cxrq-988j","id":"tcs_01M5N98YJEGNH2GWTAT9PT3QEY","modified_at":"2025-01-23T23:28:25.832165Z","published_at":"2023-05-16T18:30:16Z","references":["https://osv.dev/vulnerability/GHSA-q77x-cxrq-988j","https://nvd.nist.gov/vuln/detail/CVE-2023-32988","https://www.jenkins.io/security/advisory/2023-05-16/#SECURITY-2855%20(1)"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-q77x-cxrq-988j","url":"https://osv.dev/vulnerability/GHSA-q77x-cxrq-988j"}],"summary":"Jenkins Azure VM Agents Plugin missing permission checks"}