{"action":"Upgrade org.jenkins-ci.plugins:credentials to 2.1.19 or later.","affected":[{"fixed":"2.1.19","introduced":"0"}],"component":"org.jenkins-ci.plugins:credentials","cve_ids":["CVE-2019-10320"],"ecosystem":"Maven","epss":0.0097,"exploited":false,"fixed_versions":["2.1.19"],"ghsa_id":"GHSA-xm94-9jw8-p6hw","id":"tcs_01M5N9JKFMFFH5NP3WHVP4F696","modified_at":"2024-02-16T08:12:02.249418Z","published_at":"2022-05-24T16:46:09Z","references":["https://osv.dev/vulnerability/GHSA-xm94-9jw8-p6hw","https://nvd.nist.gov/vuln/detail/CVE-2019-10320","https://github.com/jenkinsci/credentials-plugin/commit/40d0b5cc53c265b601ffaa4469310fad390a80fb","https://access.redhat.com/errata/RHBA-2019:1605","https://access.redhat.com/errata/RHSA-2019:1636","https://jenkins.io/security/advisory/2019-05-21/#SECURITY-1322","https://wwws.nightwatchcybersecurity.com/2019/05/23/exploring-the-file-system-via-jenkins-credentials-plugin-vulnerability-cve-2019-10320","http://seclists.org/fulldisclosure/2019/May/39","http://www.openwall.com/lists/oss-security/2019/05/21/1","http://www.securityfocus.com/bid/108462"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-xm94-9jw8-p6hw","url":"https://osv.dev/vulnerability/GHSA-xm94-9jw8-p6hw"}],"summary":"Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin"}