{"action":"Upgrade org.jenkins-ci.plugins:plot to 2.1.12 or later.","affected":[{"fixed":"2.1.12","introduced":"0"}],"component":"org.jenkins-ci.plugins:plot","cve_ids":["CVE-2022-46682"],"ecosystem":"Maven","epss":0.0101,"exploited":false,"fixed_versions":["2.1.12"],"ghsa_id":"GHSA-wgpp-g6v9-7hxp","id":"tcs_01M5N9GDQQC9AH6BJ0QGW7HRZZ","modified_at":"2023-11-08T04:10:57.168831Z","published_at":"2022-12-12T09:30:35Z","references":["https://osv.dev/vulnerability/GHSA-wgpp-g6v9-7hxp","https://nvd.nist.gov/vuln/detail/CVE-2022-46682","https://github.com/jenkinsci/plot-plugin/commit/4f7afbe064aab538a242a9984e583e513863e0ac","https://github.com/jenkinsci/plot-plugin","https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2940"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-wgpp-g6v9-7hxp","url":"https://osv.dev/vulnerability/GHSA-wgpp-g6v9-7hxp"}],"summary":"Jenkins Plot Plugin XML External Entity Reference vulnerability"}