Executive brief
Missing permission checks in Jenkins Chef Sinatra Plugin allow XXE
Affected products
- Maven org.jenkins-ci.plugins:sinatra-chef-builder
Junglewise Threat Intelligence
CVE-2022-25208 · Severity: low · CVSS 3.1 · Published 2022-02-16
Technologies: org.jenkins-ci.plugins:sinatra-chef-builder (Maven). Vendors: Maven.
Missing permission checks in Jenkins Chef Sinatra Plugin allow XXE