CVE-2018-1000144

CVE-2018-1000144 affects Jenkins in the Cucumber Living Documentation Plugin (versions 1.0.12 and older). The root cause is in CukedoctorBaseAction#doDynamic, which disables the Content-Security-Policy for archived artifacts and workspace files, allowing an attacker who can control those files to...

CVE-2018-1000144: Improper Neutralization of Input During Web Page Generation

A cross site scripting vulnerability exists in Jenkins Cucumber Living Documentation Plugin 1.0.12 and older in CukedoctorBaseActiondoDynamic that disables the Content-Security-Policy protection for archived artifacts and workspace files, allowing attackers able to control the content of these...

PT-2018-9316

Name of the Vulnerable Software and Affected Versions Jenkins Cucumber Living Documentation Plugin versions 1.0.12 and older Description A cross-site scripting issue exists in the CukedoctorBaseActiondoDynamic function, which disables Content-Security-Policy protection for archived artifacts and...