CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Jenkins.
CVE
CVE-2020-2214
Severity
MEDIUM
CVSS
5.4
EPSS
0.73%
Jenkins
Original NVD Description
Jenkins ZAP Pipeline Plugin 1.9 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
Related CVEs
Other vulnerabilities affecting the same vendor(s)