Executive brief
Content-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin
Affected products
- Maven io.jenkins.plugins:neuvector-vulnerability-scanner
Junglewise Threat Intelligence
CVE-2022-43434: Content-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin
CVE-2022-43434 · Severity: low · CVSS 3.1 · Published 2022-10-19
Technologies: io.jenkins.plugins:neuvector-vulnerability-scanner (Maven). Vendors: Maven.
Related threats
- Jenkins NeuVector Vulnerability Scanner Plugin missing permission check
- Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability
- Jenkins NeuVector Vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validation
- Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text