[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-RHSA-2023:3622":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":32,"duplicates":33,"related":34,"reserved_at":9,"published_at":35,"modified_at":36,"state":9,"summary":37,"references_raw":39,"kevs":232,"epss":9,"epss_history":233,"metrics":234,"affected":240},"RHSA-2023:3622","Red Hat Security Advisory: jenkins and jenkins-2-plugins security update",null,[],[],[],[14,16,18,20,22,24,26,28,30],{"_key":15},"CVE-2022-29599",{"_key":17},"CVE-2022-30953",{"_key":19},"CVE-2022-30954",{"_key":21},"CVE-2023-1370",{"_key":23},"CVE-2023-1436",{"_key":25},"CVE-2023-20860",{"_key":27},"CVE-2023-20861",{"_key":29},"CVE-2023-27903",{"_key":31},"CVE-2023-27904",[],[],[],"2024-09-30T07:08:01Z","2026-03-25T10:02:48Z",{"cisa_kev":38,"cisa_ransomware":38,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[40,46,51,55,60,64,68,72,76,80,84,88,92,96,100,104,108,112,116,120,124,128,132,136,140,144,148,152,156,160,164,168,172,176,180,184,188,192,196,200,204,208,212,216,220,224,228],{"url":41,"sources":42,"tags":44},"https://access.redhat.com/errata/RHSA-2023:3622",[43],"osv_red_hat",[45],"Advisory",{"url":47,"sources":48,"tags":49},"https://access.redhat.com/security/updates/classification/#important",[43],[50],"ARTICLE",{"url":52,"sources":53,"tags":54},"https://docs.openshift.com/container-platform/4.13/cicd/jenkins/important-changes-to-openshift-jenkins-images.html",[43],[50],{"url":56,"sources":57,"tags":58},"https://bugzilla.redhat.com/show_bug.cgi?id=2066479",[43],[59],"REPORT",{"url":61,"sources":62,"tags":63},"https://bugzilla.redhat.com/show_bug.cgi?id=2119646",[43],[59],{"url":65,"sources":66,"tags":67},"https://bugzilla.redhat.com/show_bug.cgi?id=2119647",[43],[59],{"url":69,"sources":70,"tags":71},"https://bugzilla.redhat.com/show_bug.cgi?id=2177632",[43],[59],{"url":73,"sources":74,"tags":75},"https://bugzilla.redhat.com/show_bug.cgi?id=2177634",[43],[59],{"url":77,"sources":78,"tags":79},"https://bugzilla.redhat.com/show_bug.cgi?id=2180528",[43],[59],{"url":81,"sources":82,"tags":83},"https://bugzilla.redhat.com/show_bug.cgi?id=2180530",[43],[59],{"url":85,"sources":86,"tags":87},"https://bugzilla.redhat.com/show_bug.cgi?id=2182788",[43],[59],{"url":89,"sources":90,"tags":91},"https://bugzilla.redhat.com/show_bug.cgi?id=2188542",[43],[59],{"url":93,"sources":94,"tags":95},"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3622.json",[43],[45],{"url":97,"sources":98,"tags":99},"https://access.redhat.com/security/cve/CVE-2022-29599",[43],[59],{"url":101,"sources":102,"tags":103},"https://www.cve.org/CVERecord?id=CVE-2022-29599",[43],[45],{"url":105,"sources":106,"tags":107},"https://nvd.nist.gov/vuln/detail/CVE-2022-29599",[43],[45],{"url":109,"sources":110,"tags":111},"https://access.redhat.com/security/cve/CVE-2022-30953",[43],[59],{"url":113,"sources":114,"tags":115},"https://www.cve.org/CVERecord?id=CVE-2022-30953",[43],[45],{"url":117,"sources":118,"tags":119},"https://nvd.nist.gov/vuln/detail/CVE-2022-30953",[43],[45],{"url":121,"sources":122,"tags":123},"https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2502",[43],[50],{"url":125,"sources":126,"tags":127},"https://access.redhat.com/security/cve/CVE-2022-30954",[43],[59],{"url":129,"sources":130,"tags":131},"https://www.cve.org/CVERecord?id=CVE-2022-30954",[43],[45],{"url":133,"sources":134,"tags":135},"https://nvd.nist.gov/vuln/detail/CVE-2022-30954",[43],[45],{"url":137,"sources":138,"tags":139},"https://access.redhat.com/security/cve/CVE-2023-1370",[43],[59],{"url":141,"sources":142,"tags":143},"https://www.cve.org/CVERecord?id=CVE-2023-1370",[43],[45],{"url":145,"sources":146,"tags":147},"https://nvd.nist.gov/vuln/detail/CVE-2023-1370",[43],[45],{"url":149,"sources":150,"tags":151},"https://github.com/advisories/GHSA-493p-pfq6-5258",[43],[45],{"url":153,"sources":154,"tags":155},"https://research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633/",[43],[50],{"url":157,"sources":158,"tags":159},"https://access.redhat.com/security/cve/CVE-2023-1436",[43],[59],{"url":161,"sources":162,"tags":163},"https://www.cve.org/CVERecord?id=CVE-2023-1436",[43],[45],{"url":165,"sources":166,"tags":167},"https://nvd.nist.gov/vuln/detail/CVE-2023-1436",[43],[45],{"url":169,"sources":170,"tags":171},"https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/",[43],[50],{"url":173,"sources":174,"tags":175},"https://access.redhat.com/security/cve/CVE-2023-20860",[43],[59],{"url":177,"sources":178,"tags":179},"https://www.cve.org/CVERecord?id=CVE-2023-20860",[43],[45],{"url":181,"sources":182,"tags":183},"https://nvd.nist.gov/vuln/detail/CVE-2023-20860",[43],[45],{"url":185,"sources":186,"tags":187},"https://spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861",[43],[50],{"url":189,"sources":190,"tags":191},"https://access.redhat.com/security/cve/CVE-2023-20861",[43],[59],{"url":193,"sources":194,"tags":195},"https://www.cve.org/CVERecord?id=CVE-2023-20861",[43],[45],{"url":197,"sources":198,"tags":199},"https://nvd.nist.gov/vuln/detail/CVE-2023-20861",[43],[45],{"url":201,"sources":202,"tags":203},"https://access.redhat.com/security/cve/CVE-2023-27903",[43],[59],{"url":205,"sources":206,"tags":207},"https://www.cve.org/CVERecord?id=CVE-2023-27903",[43],[45],{"url":209,"sources":210,"tags":211},"https://nvd.nist.gov/vuln/detail/CVE-2023-27903",[43],[45],{"url":213,"sources":214,"tags":215},"https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3058",[43],[50],{"url":217,"sources":218,"tags":219},"https://access.redhat.com/security/cve/CVE-2023-27904",[43],[59],{"url":221,"sources":222,"tags":223},"https://www.cve.org/CVERecord?id=CVE-2023-27904",[43],[45],{"url":225,"sources":226,"tags":227},"https://nvd.nist.gov/vuln/detail/CVE-2023-27904",[43],[45],{"url":229,"sources":230,"tags":231},"https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2120",[43],[50],[],[],[235],{"source":43,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":236,"cvss_v4_0":9},{"baseScore":237,"baseSeverity":9,"vectorString":238,"impactScore":237,"exploitabilityScore":239},9.8,"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",10,[241,253],{"ecosystem":242,"name":243,"vendor":244,"product":243,"cpe_part":9,"purl_type":245,"purl_namespace":244,"purl_name":243,"source":9,"versions":246},"Red Hat","jenkins","redhat","rpm",[247],{"version":248,"is_range":249,"range_type":250,"version_start":9,"version_start_type":9,"version_end":251,"version_end_type":252,"fixed_in":9},"lt0:2_401_1_1686680404_3_el8",true,"ecosystem","0:2.401.1.1686680404-3.el8","excluding",{"ecosystem":242,"name":254,"vendor":244,"product":254,"cpe_part":9,"purl_type":245,"purl_namespace":244,"purl_name":254,"source":9,"versions":255},"jenkins-2-plugins",[256],{"version":257,"is_range":249,"range_type":250,"version_start":9,"version_start_type":9,"version_end":258,"version_end_type":252,"fixed_in":9},"lt0:4_13_1686680473_1_el8","0:4.13.1686680473-1.el8"]