Security Advisory

CVE-2020-2173

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-04-07 12:25:24

Last updated 2024-08-04 07:01:41

Assigner jenkins

State PUBLISHED

Description

Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerability exploitable by users able to change report content.

← Browse all CVEs View on cve.org ↗