{"action":"Upgrade org.jenkins-ci.main:jenkins-core to 1.625.2 (1.625.x) or 1.640 (1.640.x) or later.","affected":[{"fixed":"1.625.2","introduced":"0"},{"fixed":"1.640","introduced":"1.626"}],"component":"org.jenkins-ci.main:jenkins-core","cve_ids":["CVE-2015-7539"],"ecosystem":"Maven","epss":0.01397,"exploited":false,"fixed_versions":["1.625.2","1.640"],"ghsa_id":"GHSA-x274-9m9r-fm5g","id":"tcs_01M5N9HGYMA9CZM6JTPDTG54WV","modified_at":"2025-03-13T19:01:09.399283Z","published_at":"2022-05-13T01:30:07Z","references":["https://osv.dev/vulnerability/GHSA-x274-9m9r-fm5g","https://nvd.nist.gov/vuln/detail/CVE-2015-7539","https://github.com/jenkinsci/jenkins/commit/11479a2cc0a322a6bcd7e65667f3d24aa4d444bb","https://github.com/jenkinsci/jenkins/commit/97adb71aa4509f91e408a16ba312e817ec015cf4","https://github.com/jenkinsci/jenkins/commit/9ec88357a354d8354728cc06e2b8c8b68aee58bf","https://github.com/jenkinsci/jenkins/commit/c158648afa8888bc49ac337c973d4e4bc050118e","https://github.com/jenkinsci/jenkins/commit/f99cb46e06f394637067730a82f46bddc3567295","https://access.redhat.com/errata/RHSA-2016:0070","https://github.com/jenkinsci/jenkins","https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-12-09","http://rhn.redhat.com/errata/RHSA-2016-0489.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-x274-9m9r-fm5g","url":"https://osv.dev/vulnerability/GHSA-x274-9m9r-fm5g"}],"summary":"Jenkins does not Verify Checksums for Plugin Files"}