CVE-2022-25209

UNRATED

JSON export Create alert

Description

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

Jenkins Project / Jenkins Chef Sinatra Pluginunspecified – 1.20
Jenkins Project / Jenkins Chef Sinatra Pluginnext of 1.20 – unspecified

References

MISChttps://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-1377