CVE-2020-2173

CVE-2020-2173 affects the Jenkins Gatling Plugin. The root cause is that versions 1.2.7 and earlier prevent Content-Security-Policy headers from being set for Gatling reports, enabling an XSS vulnerability when users can modify report content. Publicly documented details indicate the issue impact...

PT-2020-15383 · Jenkins · Jenkins Gatling Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Gatling Plugin versions 1.2.7 and earlier Description: The issue results in a cross-site scripting XSS vulnerability, which is exploitable by users able to change report content. This occurs because the plugin prevents...