{"action":"Upgrade org.jenkins-ci.main:jenkins-core to 1.625.2 (1.625.x) or 1.640 (1.640.x) or later.","affected":[{"fixed":"1.640","introduced":"1.626"},{"fixed":"1.625.2","introduced":"0"}],"component":"org.jenkins-ci.main:jenkins-core","cve_ids":["CVE-2015-7538"],"ecosystem":"Maven","epss":0.02222,"exploited":false,"fixed_versions":["1.640","1.625.2"],"ghsa_id":"GHSA-w7qm-fprw-cqgq","id":"tcs_01M5N9FW1KTDZBVSTNH39PJBGF","modified_at":"2025-03-13T18:40:21.212664Z","published_at":"2022-05-13T01:30:06Z","references":["https://osv.dev/vulnerability/GHSA-w7qm-fprw-cqgq","https://nvd.nist.gov/vuln/detail/CVE-2015-7538","https://github.com/jenkinsci/jenkins/commit/ba747888108d0db90d469c6d210b1df465d8fac1","https://github.com/jenkinsci/jenkins/commit/ef2c0dc163695af3a57ad7a45571293377ff679b","https://access.redhat.com/errata/RHSA-2016:0070","https://github.com/jenkinsci/jenkins","https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-12-09","http://rhn.redhat.com/errata/RHSA-2016-0489.html"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-w7qm-fprw-cqgq","url":"https://osv.dev/vulnerability/GHSA-w7qm-fprw-cqgq"}],"summary":"Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack"}