{"action":"Upgrade org.jenkins-ci.plugins:publish-over-ssh to 1.23 or later.","affected":[{"fixed":"1.23","introduced":"0"}],"component":"org.jenkins-ci.plugins:publish-over-ssh","cve_ids":["CVE-2022-23114"],"ecosystem":"Maven","epss":0.00307,"exploited":false,"fixed_versions":["1.23"],"ghsa_id":"GHSA-r3rr-wph6-9638","id":"tcs_01M5N9AV72HBTR2NH13D0PNYMC","modified_at":"2024-02-16T08:03:02.735706Z","published_at":"2022-01-13T00:00:53Z","references":["https://osv.dev/vulnerability/GHSA-r3rr-wph6-9638","https://nvd.nist.gov/vuln/detail/CVE-2022-23114","https://github.com/jenkinsci/publish-over-ssh-plugin/commit/2b4b9b2dfab5c001669f9a74c0e6078b0a27b928","https://github.com/jenkinsci/publish-over-ssh-plugin/commit/70b7689bf6fc894f4dc6c0ff34dd72808840760e","https://github.com/jenkinsci/publish-over-ssh-plugin","https://github.com/jenkinsci/publish-over-ssh-plugin/releases/tag/publish-over-ssh-1.23","https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2291","http://www.openwall.com/lists/oss-security/2022/01/12/6"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-r3rr-wph6-9638","url":"https://osv.dev/vulnerability/GHSA-r3rr-wph6-9638"}],"summary":"Password stored in plain text by Jenkins Publish Over SSH Plugin"}