CVE-2022-43433

creationtimestamp| type| source ---|---|--- 2022-10-19 20:15:19+00:00| seen| https://t.me/cibsecurity/51796...

CVE-2022-43433

CVE-2022-43433 affects Jenkins ScreenRecorder Plugin 0.7 and earlier. It programmatically disables Content-Security-Policy (CSP) for user-generated content served by Jenkins (workspaces, /userContent, artifacts), via updating a Java system property, effectively weakening CSP and enabling potentia...

CVE-2022-43433

Jenkins ScreenRecorder Plugin 0.7 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...