Lucene search

PRIOn knowledge basePRION:CVE-2024-23905

HistoryJan 24, 2024 - 6:15 p.m.

Design/Logic Flaw

2024-01-2418:15:00

PRIOn knowledge base

www.prio-n.com

jenkins

red hat

dependency analytics

content security policy

user-generated content

workspaces

archived artifacts

nvd

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.4%

JSON

Jenkins Red Hat Dependency Analytics Plugin 0.7.1 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.

CPENameOperatorVersion
red_hat_dependency_analyticsle0.7.1

CPE	Name	Operator	Version
	red_hat_dependency_analytics	le	0.7.1

References

www.openwall.com/lists/oss-security/2024/01/24/6

www.jenkins.io/security/advisory/2024-01-24/