Lucene search
+L

12 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 12:05 a.m.•12 views

CVE-2022-43432

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

4.3CVSS6.8AI score0.00598EPSS
SaveExploits0References1
OSV
OSV
•added 2022/10/19 7:00 p.m.•85 views

GHSA-PX4X-HJM5-W8X3 Content-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin

Jenkins sets the Content-Security-Policy header to static files served by Jenkins specifically DirectoryBrowserSupport, such as workspaces, /userContent, or archived artifacts, unless a Resource Root URL is specified. XFramium Builder Plugin 1.0.22 and earlier globally disables the...

8.8CVSS4.6AI score0.00598EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/10/19 7:00 p.m.•42 views

Content-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin

Jenkins sets the Content-Security-Policy header to static files served by Jenkins specifically DirectoryBrowserSupport, such as workspaces, /userContent, or archived artifacts, unless a Resource Root URL is specified. XFramium Builder Plugin 1.0.22 and earlier globally disables the...

4.3CVSS4.8AI score0.00598EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/10/19 4:15 p.m.•16 views

CVE-2022-43432

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

4.3CVSS5.8AI score0.00598EPSS
SaveExploits0References2
NVD
NVD
•added 2022/10/19 4:15 p.m.•49 views

CVE-2022-43432

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

4.3CVSS0.00598EPSS
SaveExploits0References2
Prion
Prion
•added 2022/10/19 4:15 p.m.•32 views

Design/Logic Flaw

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

4CVSS4.6AI score0.00598EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/10/19 12:00 a.m.•16 views

Jenkins XFramium Builder Plugin 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

4.3CVSS5.2AI score0.00598EPSS
SaveExploits0References5
Mend
Mend
•added 2022/10/19 12:00 a.m.•3 views

CVE-2022-43432

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

5.3CVSS0.00598EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/10/19 12:00 a.m.•10 views

CVE-2022-43432

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

4.6AI score0.00598EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/10/19 12:00 a.m.•45 views

CVE-2022-43432

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

4.9AI score0.00598EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/19 12:00 a.m.•4 views

CVE-2022-43432: Protection Mechanism Failure

Jenkins XFramium Builder Plugin 1.0.22 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download...

4.3CVSS5.5AI score0.00598EPSS
SaveExploits0References2
Jenkins Security Advisories
Jenkins Security Advisories
•added 2022/10/19 12:00 a.m.•16 views

Content-Security-Policy protection for user content disabled by XFramium Builder

Jenkins sets the Content-Security-Policy header to static files served by Jenkins specifically DirectoryBrowserSupport, such as workspaces, /userContent, or archived artifacts, unless a Resource Root URL is specified. XFramium Builder 1.0.22 and earlier globally disables the Content-Security-Poli...

8.8CVSS4.8AI score0.00598EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder