Junglewise Threat Intelligence

CVE-2022-25207: CSRF vulnerability in Jenkins Chef Sinatra Plugin allow XXE

CVE-2022-25207 · Severity: low · CVSS 3.1 · Published 2022-02-16

Technologies: org.jenkins-ci.plugins:sinatra-chef-builder (Maven). Vendors: Maven.

Executive brief

CSRF vulnerability in Jenkins Chef Sinatra Plugin allow XXE

Affected products

  • Maven org.jenkins-ci.plugins:sinatra-chef-builder

Related threats