Sign in

Not rated

CVE-2022-25209 Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE)…

Description

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Chef Sinatra Plugin 1.20	earliest → 1.20	No fix stated

The 5 CVEs of Jenkins Chef Sinatra Plugin →

CVE-2022-25208 A missing permission check in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers with Overall/Read permission… Not rated CVE-2022-25207 A cross-site request forgery (CSRF) vulnerability in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers to… Not rated CVE-2019-1003086 A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the… Not rated CVE-2019-1003087 A missing permission check in Jenkins Chef Sinatra Plugin in the… Not rated

Do you use Jenkins Chef Sinatra Plugin?

Track this CVE Watch Jenkins Chef Sinatra Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2022-25209

Timeline

Published February 15, 2022
Last modified August 3, 2024

References

www.jenkins.io www.jenkins.io

Track this CVE