CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Jenkins.
CVE
CVE-2024-23905
Severity
MEDIUM
CVSS
5.4
EPSS
0.56%
Jenkins
Original NVD Description
Jenkins Red Hat Dependency Analytics Plugin 0.7.1 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
Related CVEs
Other vulnerabilities affecting the same vendor(s)