Beveiligingsadvies

CVE-2020-2173

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-04-07 12:25:24
Laatst bijgewerkt 2024-08-04 07:01:41
Toegewezen door jenkins
CVSS-score geen score
Status PUBLISHED

Beschrijving

Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerability exploitable by users able to change report content.