Lucene search

K
osvGoogleOSV:CVE-2022-25207
HistoryFeb 15, 2022 - 5:15 p.m.

CVE-2022-25207

2022-02-1517:15:11
Google
osv.dev
8
cve-2022-25207
jenkins
chef sinatra plugin
csrf
vulnerability
http request
xml response

AI Score

7

Confidence

High

EPSS

0.001

Percentile

34.3%

A cross-site request forgery (CSRF) vulnerability in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-controlled URL and have it parse an XML response.

AI Score

7

Confidence

High

EPSS

0.001

Percentile

34.3%

Related for OSV:CVE-2022-25207