Cucumber Living Documentation

cucumber_living_documentation

Vendor: Jenkins • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-1000144

1Jenkins

1Cucumber Living Documentation

Nov 21, 2024

Apr 5, 2018

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

A cross site scripting vulnerability exists in Jenkins Cucumber Living Documentation Plugin 1.0.12 and older in CukedoctorBaseAction#doDynamic that disables the Content-Security-Policy protection for archived artifacts and workspace files, allowing attackers able to control the content of these files to attack Jenkins users.Show less