{"action":"Upgrade io.jenkins.plugins:warnings-ng to 9.0.2 (9.0.x), 9.5.2 (9.5.x), 9.7.1 (9.7.x) or 9.10.3 (9.10.x) or later.","affected":[{"fixed":"9.10.3","introduced":"9.8.0"},{"fixed":"9.7.1","introduced":"9.6.0"},{"fixed":"9.5.2","introduced":"9.1.0"},{"fixed":"9.0.2","introduced":"0"}],"component":"io.jenkins.plugins:warnings-ng","cve_ids":["CVE-2022-23107"],"ecosystem":"Maven","epss":0.01886,"exploited":false,"fixed_versions":["9.10.3","9.7.1","9.5.2","9.0.2"],"ghsa_id":"GHSA-rvh4-g2rj-hr9c","id":"tcs_01M5N9CMBNXHQQ1BVDMETECVBQ","modified_at":"2024-02-16T08:16:52.944151Z","published_at":"2022-01-21T23:38:05Z","references":["https://osv.dev/vulnerability/GHSA-rvh4-g2rj-hr9c","https://nvd.nist.gov/vuln/detail/CVE-2022-23107","https://github.com/CVEProject/cvelist/blob/36f932156733baab1b13868be4338de406a1dec7/2022/23xxx/CVE-2022-23107.json","https://github.com/jenkinsci/warnings-ng-plugin","https://github.com/jenkinsci/warnings-ng-plugin/releases/tag/v9.10.3","https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2090","http://www.openwall.com/lists/oss-security/2022/01/12/6"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-rvh4-g2rj-hr9c","url":"https://osv.dev/vulnerability/GHSA-rvh4-g2rj-hr9c"}],"summary":"Path Traversal in Jenkins Warnings Next Generation Plugin"}