CVE-2022-43434
mediumpriority · track · 21EPSS 0.008 · 56 %ileDEEUUSEPSS · scored 2026-10-27
Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.9–8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (6)
Products and version ranges known to be affected.
- Red Hat OpenShift container platform 4.0.51all versionscert_bundDEcpe:/a:redhat:openshift:container_platform_4.0.51
- jenkins neuvector vulnerability scanner≤ 1.20nvdUScpe:2.3:a:jenkins:neuvector_vulnerability_scanner:*:*:*:*:*:*:*:*
- Maven io.jenkins.plugins:neuvector-vulnerability-scanner< 1.22osvUSpkg:maven/io.jenkins.plugins/neuvector-vulnerability-scanner
advisories (2)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2022-1804Jenkins Plugins: Mehrere SchwachstellenDeutsch2022-10-19csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Jenkins Plugins ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.
- GHSA-wmfh-h3vm-rcxmContent-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin2022-10-19ghsa · osvUS
Jenkins sets the Content-Security-Policy header to static files served by Jenkins (specifically `DirectoryBrowserSupport`), such as workspaces, `/userContent`, or archived artifacts, unless a Resource Root URL is specified. NeuVector Vulnerability Scanner Plugin 1.20 and earlier globally disables the `Content-Security-Policy` header for static files served by Jenkins whenever the 'NeuVector Vulnerability Scanner' build step is executed. This allows cross-site scripting (XSS) attacks by users with the ability to control files in workspaces, archived artifacts, etc. Jenkins instances with [Resource Root URL](https://www.jenkins.io/doc/book/security/user-content/#resource-root-url) configured are unaffected.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (9)
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2022/10/19/3cnnvd
- https://cxsecurity.com/cveshow/CVE-2022-43434/cnnvd
- https://vigilance.fr/vulnerability/Jenkins-Plugins-multiple-vulnerabilities-39658cnnvd
- https://www.auscert.org.au/bulletins/ESB-2022.5232cnnvd
- https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2865cnnvd
- http://www.openwall.com/lists/oss-security/2022/10/19/3enisa_euvd
- https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2865enisa_euvd
- http://www.openwall.com/lists/oss-security/2022/10/19/3Mailing ListThird Party Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan