CVE-2022-43435

CVSS v3.1 5.3 (Medium)

EPSS 0.08 % (34^th)

Affected Products 1

Advisories 2

Jenkins 360 FireLine Plugin 1.7.2 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.

Weaknesses

CWE-NVD-Other

CVE Status: PUBLISHED
CNA: Jenkins Project
Published Date: 2022-10-19 16:15:12
(23 months ago)
Updated Date: 2023-11-22 04:18:55
(10 months ago)

Affected Products

Jenkins

360 Fireline

Configuration #1

		CPE23	From	Up To
	Jenkins 360 Fireline for Jenkins 1.7.2 and prior versions	cpe:2.3:a:jenkins:360_fireline::::::jenkins		<= 1.7.2