Beveiligingsadvies

CVE-2020-2162

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-03-25 16:05:35
Laatst bijgewerkt 2024-08-04 07:01:40
Toegewezen door jenkins
CVSS-score geen score
Status PUBLISHED

Beschrijving

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not set Content-Security-Policy headers for files uploaded as file parameters to a build, resulting in a stored XSS vulnerability.