description: Jenkins NeuVector Vulnerability Scanner Plugin 1.20 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
affected:
{
product: Jenkins NeuVector Vulnerability Scanner Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 1.20, status: affected, version: unspecified, versionType: custom
lessThan: unspecified, status: unknown, version: next of 1.20, versionType: custom
}