Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-15202
HistoryFeb 17, 2022 - 12:00 a.m.

Jenkins Chef Sinatra Plugin XML External Entity Injection Vulnerability

2022-02-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.001 Low

EPSS

Percentile

42.9%

The Jenkins Plugin is a plug-in that provides the appropriate functionality for Jenkins.Jenkins Chef Sinatra Plugin XML External Entity Injection vulnerability. An attacker could use this vulnerability to allow Jenkins to parse a crafted XML response to extract secrets.

CPENameOperatorVersion
jenkins chef sinatra pluginle1.20

0.001 Low

EPSS

Percentile

42.9%

Related for CNVD-2022-15202