{"action":"Upgrade org.rundeck:rundeckapp to 4.17.3 or later.","affected":[{"fixed":"4.17.3","introduced":"4.17.0"}],"component":"org.rundeck:rundeckapp","cve_ids":["CVE-2023-47112"],"ecosystem":"Maven","epss":0.00508,"exploited":false,"fixed_versions":["4.17.3"],"ghsa_id":"GHSA-xvmv-4rx6-x6jx","id":"tcs_01M5N9K17KPKGYSBYEYHV2FM2R","modified_at":"2023-11-17T22:04:11Z","published_at":"2023-11-16T20:13:06Z","references":["https://osv.dev/vulnerability/GHSA-xvmv-4rx6-x6jx","https://github.com/rundeck/rundeck/security/advisories/GHSA-xvmv-4rx6-x6jx","https://nvd.nist.gov/vuln/detail/CVE-2023-47112","https://github.com/rundeck/rundeck/commit/8992879036a1ddacfca78559d823be0424796e7e","https://github.com/rundeck/rundeck"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-xvmv-4rx6-x6jx","url":"https://osv.dev/vulnerability/GHSA-xvmv-4rx6-x6jx"}],"summary":"Authenticated users can view job names and groups they do not have authorization to view"}