CVE-2022-25209 — Jenkins project / Jenkins Chef Sinatra Plugin

CVE-2022-25209

Jenkins project / Jenkins Chef Sinatra Plugin PUBLISHED

Description (CNA)

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Vendor / product	Versions
Jenkins project / Jenkins Chef Sinatra Plugin	affected unspecified through 1.20; unknown next of 1.20 before unspecified

No CWE identifiers supplied.

CVE

No English description supplied.