Security Advisory

CVE-2022-43434

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-10-19 00:00:00
Last updated 2025-05-08 18:18:39
Assigner jenkins
State PUBLISHED

Description

Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.