{
  "_pruva_terminal_reconciliation": {
    "authored_artifact_closure_sha256": "6e410adcc8c8c407cf7aa6fc68d5fad8fd6a60b22cdc87ef0b90e9f7ddefd7fb",
    "authored_runtime_manifest_sha256": "8f92c6d87dd7df726448d356372977141f9f52200f70280b1371f57db3c3a68a",
    "authored_verdict_sha256": "f262a5fc6c6ca2ad04413b6222a060cfc91815bf39a4220d48990fe90cb047af",
    "claim_matching": "evaluated",
    "schema_version": 2,
    "status": "completed"
  },
  "accepted_exploit_knowledge_record_ids": [
    "37641beb-1a0b-4652-9016-1cd3ac6e5be9",
    "5937b634-1c1a-43dc-aa06-9558ac0e54d2",
    "f9bb61ee-6e87-475a-9240-c7d2c633c3b0",
    "c14daeaf-8579-4a77-83d7-c479d8eb25a2"
  ],
  "attacker_controlled_input": "Authenticated multipart structured form data whose ListView columns stapler-class-bag selects StashedFileParameterValue, including an uploaded Groovy file and traversal name",
  "claim_outcome": "confirmed",
  "claimed_impact_class": "code_execution",
  "claimed_surface": "api_remote",
  "crash_observed": false,
  "end_to_end_target_reached": true,
  "evidence_scope": "production_path",
  "exploit_chain_demonstrated": true,
  "exploitability_confidence": "high",
  "inferred": false,
  "observed_impact_class": "code_execution",
  "read_write_primitive_observed": true,
  "repro_result": "confirmed",
  "sanitizer_used": false,
  "trigger_path": "POST /user/alice/my-views/createView -> Stapler RequestImpl collection bindJSON -> incompatible @DataBoundConstructor -> JENKINS_HOME/init.groovy.d write -> controller restart",
  "validated_surface": "api_remote"
}