{"action":"Upgrade io.jenkins.blueocean:blueocean to 1.23.3 or later.","affected":[{"fixed":"1.23.3","introduced":"0"}],"component":"io.jenkins.blueocean:blueocean","cve_ids":["CVE-2020-2254"],"ecosystem":"Maven","epss":0.02118,"exploited":false,"fixed_versions":["1.23.3"],"ghsa_id":"GHSA-vq7j-6pcq-f48p","id":"tcs_01M5N9EKE8CJKEQEP96V21V08K","modified_at":"2024-02-16T08:10:23.754867Z","published_at":"2022-05-24T17:28:24Z","references":["https://osv.dev/vulnerability/GHSA-vq7j-6pcq-f48p","https://nvd.nist.gov/vuln/detail/CVE-2020-2254","https://github.com/jenkinsci/blueocean-plugin/commit/f0dd4b68d62ac3c3c85012d6eb0c92bcebf85e12","https://github.com/jenkinsci/blueocean-plugin","https://www.jenkins.io/security/advisory/2020-09-16/#SECURITY-1956","http://www.openwall.com/lists/oss-security/2020/09/16/3"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-vq7j-6pcq-f48p","url":"https://osv.dev/vulnerability/GHSA-vq7j-6pcq-f48p"}],"summary":"Path traversal vulnerability in Blue Ocean Plugin"}