CVE-2022-25209

Summary

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected Software

VendorProductVersion RangeStatus
Jenkins projectJenkins Chef Sinatra Pluginunspecified <= 1.20affected
Jenkins projectJenkins Chef Sinatra Pluginnext of 1.20 < unspecifiedunknown

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References