CVE-2022-25209

UNRATEDJSON export Create alert

Description

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

Affected products

Jenkins Project / Jenkins Chef Sinatra Pluginunspecified – 1.20
Jenkins Project / Jenkins Chef Sinatra Pluginnext of 1.20 – unspecified

References

MISChttps://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-1377