Lucene search
+L

61 matches found

Jenkins Security Advisories
Jenkins Security Advisories
•added 2018/03/26 12:00 a.m.•23 views

Cucumber Living Documentation Plugin disabled Content-Security-Policy for archived and workspace files

Jenkins 1.641 and 1.625.3 introduced Content-Security-Policy HTTP headers as protection against Cross-Site Scripting attacks using workspace files and archived artifacts served using DirectoryBrowserSupport SECURITY-95. Cucumber Living Documentation Plugin disabled this XSS protection until Jenki...

6.1CVSS5.9AI score0.00844EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder