Design/Logic Flaw

2022-10-1916:15:00

PRIOn knowledge base

www.prio-n.com

jenkins

fireline plugin

content security policy

0.001 Low

EPSS

Percentile

33.7%

JSON

Jenkins 360 FireLine Plugin 1.7.2 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.

CPENameOperatorVersion
360_firelinele1.7.2

CPE	Name	Operator	Version
	360_fireline	le	1.7.2

References

www.openwall.com/lists/oss-security/2022/10/19/3

www.jenkins.io/security/advisory/2022-10-19/

0.001 Low

EPSS

Percentile

33.7%

JSON

Related for PRION:CVE-2022-43435