CVE-2022-25209

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks

published February 15, 2022

CVSS
—
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01107 · 65.6th percentile
Published
2022-02-15T16:11Z
EPSS history
Timeline
  • 15 FEB 16:11Z
    Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks
    cvelistv5