Product · Jenkins Project

Jenkins Red Hat Dependency Analytics Plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2024-23905

Content-Security-Policy disabled by Red Hat Dependency Analytics Jenkins Plugin

Jenkins Red Hat Dependency Analytics Plugin 0.7.1 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.

Jenkins Project Jenkins Red Hat Dependency Analytics Plugin io.jenkins.plugins:redhat-dependency-analytics Web / CMS Maven

Jan 24, 2024