Security Advisory

CVE-2020-2214

5.4
MEDIUM

Vulnerability Description

Jenkins ZAP Pipeline Plugin 1.9 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
Published Date July 2, 2020
Official Source NIST NVD Advisory