Skip to content
Sign in
Not rated

CVE-2020-2173 Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports…

Description

Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerability exploitable by users able to change report content.

Affected products and versions

Product Affected versions Fixed in
Jenkins Gatling Plugin 1.2 earliest → latest No fix stated

Other CVEs of Jenkins Gatling Plugin

The 2 CVEs of Jenkins Gatling Plugin →
CVE-2025-5806 Jenkins Gatling Plugin 136.vb_9009b_3d33a_e serves Gatling reports in a manner that bypasses the Content-Security-Policy… 8.0 High
Track this CVE