CVE-2022-25208

A missing permission check in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers with Overall/Read permission to have Jenkins send an HTTP request to an attacker-controlled URL and have it parse an XML response...

CVE-2022-25208

creationtimestamp| type| source ---|---|--- 2022-02-15 20:35:31+00:00| seen| https://t.me/cibsecurity/37510...

CVE-2022-25208

A missing permission check in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers with Overall/Read permission to have Jenkins send an HTTP request to an attacker-controlled URL and have it parse an XML response...

CVE-2022-25208

A missing permission check in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers with Overall/Read permission to have Jenkins send an HTTP request to an attacker-controlled URL and have it parse an XML response...

CVE-2022-25208

Affected software: Jenkins Chef Sinatra Plugin (versions 1.20 and earlier). Root cause: Missing permission checks in a form validation method allow an attacker with Overall/Read permission to cause Jenkins to send an HTTP request to an attacker-controlled URL and parse the XML response; the XML p...