Lucene search
PRIOn knowledge basePRION:CVE-2022-25208HistoryFeb 15, 2022 - 5:15 p.m.
Design/Logic Flaw
2022-02-1517:15:00
PRIOn knowledge base
www.prio-n.com
2
A missing permission check in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers with Overall/Read permission to have Jenkins send an HTTP request to an attacker-controlled URL and have it parse an XML response.
| CPE | Name | Operator | Version |
|---|---|---|---|
| chef_sinatra | le | 1.20 |
Related
cnvd
cnvd
Jenkins Chef Sinatra Plugin Access Control Error Vulnerability
2022-02-17 00:00:00
github
github
Missing permission checks in Jenkins Chef Sinatra Plugin allow XXE
2022-02-16 00:01:15
cve
cve
CVE-2022-25208
2022-02-15 17:15:11
osv
osv
Missing permission checks in Jenkins Chef Sinatra Plugin allow XXE
2022-02-16 00:01:15
CVE-2022-25208
2022-02-15 17:15:11
nvd
nvd
CVE-2022-25208
2022-02-15 17:15:11
cvelist
cvelist
CVE-2022-25208
2022-02-15 16:11:45
