CVE-2020-2173

2020-04-0713:15:13

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.0%

JSON

Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerability exploitable by users able to change report content.

CPENameOperatorVersion
gatling-plugineq1.2.2
gatling-plugineq1.2.1
gatling-plugineq1.2.0
gatling-plugineq1.0.2
gatling-plugineq1.0.0
gatling-plugineq1.0.3
gatling-plugineq1.2.3
gatling-plugineq1.2.4
gatling-plugineq1.1.1
gatling-plugineq1.1.2

Name	Operator	Version
gatling-plugin	eq	1.2.2
gatling-plugin	eq	1.2.1
gatling-plugin	eq	1.2.0
gatling-plugin	eq	1.0.2
gatling-plugin	eq	1.0.0
gatling-plugin	eq	1.0.3
gatling-plugin	eq	1.2.3
gatling-plugin	eq	1.2.4
gatling-plugin	eq	1.1.1
gatling-plugin	eq	1.1.2