CVE-2022-25209 in Chef Sinatra Plugininformación

Resumen

por MITRE • 2022-02-15

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservar

2022-02-15

Divulgación

2022-02-15

Moderación

aceptado

Artículo

VDB-193159

CPE

listo

EPSS

0.01107

KEV

no

Actividades

muy bajo

Sector

Telecommunication

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-25209
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-25209
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-25209/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you know our Splunk app?

Download it now for free!