Lucene search

PRIOn knowledge basePRION:CVE-2022-43433

HistoryOct 19, 2022 - 4:15 p.m.

Design/Logic Flaw

2022-10-1916:15:00

PRIOn knowledge base

www.prio-n.com

jenkins

screenrecorder

logic flaw

content-security-policy

user-generated content

workspaces

archived artifacts

nvd

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.2%

JSON

Jenkins ScreenRecorder Plugin 0.7 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.

CPENameOperatorVersion
screenrecorderle0.7

CPE	Name	Operator	Version
	screenrecorder	le	0.7

References

www.openwall.com/lists/oss-security/2022/10/19/3

www.jenkins.io/security/advisory/2022-10-19/