description: Jenkins Red Hat Dependency Analytics Plugin 0.7.1 and earlier programmatically disables Content-Security-Policy protection for user-generated content in workspaces, archived artifacts, etc. that Jenkins offers for download.
affected:
{
vendor: Jenkins Project
product: Jenkins Red Hat Dependency Analytics Plugin
versions:
version: 0, versionType: maven, lessThanOrEqual: 0.7.1, status: affected
defaultStatus: unaffected
}