Design/Logic Flaw

2022-10-1916:15:00

PRIOn knowledge base

www.prio-n.com

jenkins

neuvector

vulnerability

scanner

plugin

content-security-policy

user-generated content

workspaces

archived artifacts

nvd

0.001 Low

EPSS

Percentile

33.5%

JSON

Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.

CPENameOperatorVersion
neuvector_vulnerability_scannerle1.20

CPE	Name	Operator	Version
	neuvector_vulnerability_scanner	le	1.20

References

www.openwall.com/lists/oss-security/2022/10/19/3

www.jenkins.io/security/advisory/2022-10-19/

0.001 Low

EPSS

Percentile

33.5%

JSON

Related for PRION:CVE-2022-43434