CVE-2022-43434
Assigner: jenkins
Published: 2022-10-19T00:00:00
State: PUBLISHED
affected: product: Jenkins NeuVector Vulnerability Scanner Plugin
vendor: Jenkins project
versions: lessThanOrEqual: 1.20
status: affected
version: unspecified
versionType: custom
lessThan: unspecified
status: unknown
version: next of 1.20
versionType: custom
descriptions: value: Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.