Security Advisory

CVE-2022-43434

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-10-19 00:00:00
Last updated 2025-05-08 18:18:39
Assigner jenkins
CVSS score not scored
State PUBLISHED

Description

Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.