{"action":"Upgrade org.jenkins-ci.main:jenkins-core to 2.414.2 (2.414.x) or 2.424 (2.424.x) or later.","affected":[{"fixed":"2.414.2","introduced":"2.50"},{"fixed":"2.424","introduced":"2.415"}],"component":"org.jenkins-ci.main:jenkins-core","cve_ids":["CVE-2023-43497"],"ecosystem":"Maven","epss":0.00966,"exploited":false,"fixed_versions":["2.414.2","2.424"],"ghsa_id":"GHSA-qv64-w99c-qcr9","id":"tcs_01M5N9A8N26JK86MJPPCK4EG7Y","modified_at":"2024-02-16T08:16:40.903218Z","published_at":"2023-09-20T18:30:21Z","references":["https://osv.dev/vulnerability/GHSA-qv64-w99c-qcr9","https://nvd.nist.gov/vuln/detail/CVE-2023-43497","https://www.jenkins.io/security/advisory/2023-09-20/#SECURITY-3073","http://www.openwall.com/lists/oss-security/2023/09/20/5"],"severity":{"label":"low","score":3.6},"sources":[{"source":"osv","source_id":"GHSA-qv64-w99c-qcr9","url":"https://osv.dev/vulnerability/GHSA-qv64-w99c-qcr9"}],"summary":"Jenkins temporary uploaded file created with insecure permissions"}