Lucene search
+L

10 matches found

osv_ghsa
osv_ghsa
•added 2022/10/19 7:00 p.m.•88 views

GHSA-PX4X-HJM5-W8X3 Content-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin

Jenkins sets the Content-Security-Policy header to static files served by Jenkins specifically DirectoryBrowserSupport, such as workspaces, /userContent, or archived artifacts, unless a Resource Root URL is specified. XFramium Builder Plugin 1.0.22 and earlier globally disables the...

8.8CVSS4.6AI score0.00665EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/10/19 7:00 p.m.•45 views

Content-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin

Jenkins sets the Content-Security-Policy header to static files served by Jenkins specifically DirectoryBrowserSupport, such as workspaces, /userContent, or archived artifacts, unless a Resource Root URL is specified. XFramium Builder Plugin 1.0.22 and earlier globally disables the...

4.3CVSS4.8AI score0.00665EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2022/10/19 4:15 p.m.•51 views

CVE-2022-43432

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

4.3CVSS0.00665EPSS
SaveExploits0References2
Prion
Prion
•added 2022/10/19 4:15 p.m.•33 views

Design/Logic Flaw

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

4CVSS4.6AI score0.00665EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2022/10/19 12:00 a.m.•8 views

CVE-2022-43432

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

5.3CVSS0.00665EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/10/19 12:00 a.m.•48 views

CVE-2022-43432

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

4.9AI score0.00665EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/10/19 12:00 a.m.•12 views

CVE-2022-43432

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

4.6AI score0.00665EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/19 12:00 a.m.•5 views

CVE-2022-43432: Protection Mechanism Failure

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

4.3CVSS5.5AI score0.00665EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/10/19 12:00 a.m.•19 views

Jenkins XFramium Builder Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS5.2AI score0.00665EPSS
SaveExploits0References5
Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/10/19 12:00 a.m.•18 views

Content-Security-Policy protection for user content disabled by XFramium Builder

Jenkins sets the Content-Security-Policy header to static files served by Jenkins specifically DirectoryBrowserSupport, such as workspaces, /userContent, or archived artifacts, unless a Resource Root URL is specified. XFramium Builder 1.0.22 and earlier globally disables the Content-Security-Poli...

8.8CVSS4.8AI score0.00665EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder