Skip to content

Known vulnerabilities in Jenkins project Jenkins Chef Sinatra Plugin

Is your version affected?

CVE Summary Score Published
CVE-2022-25209 Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE)… Not rated Feb 15, 2022
CVE-2022-25208 A missing permission check in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers with Overall/Read permission… Not rated Feb 15, 2022
CVE-2022-25207 A cross-site request forgery (CSRF) vulnerability in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers to… Not rated Feb 15, 2022
CVE-2019-1003087 A missing permission check in Jenkins Chef Sinatra Plugin in the… Not rated Apr 4, 2019
CVE-2019-1003086 A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the… Not rated Apr 4, 2019

Other Jenkins project products