Recipe Security Vulnerabilities and Issues — Recipe CVE List

Lucene search

JenkinsRecipe

2 matches found

CVE•added 2022/06/30 6:15 p.m.•270 views

CVE-2022-34792

A cross-site request forgery (CSRF) vulnerability in Jenkins Recipe Plugin 1.2 and earlier allows attackers to send an HTTP request to an attacker-specified URL and parse the response as XML.

8CVSS7.8AI score0.00091EPSS

CVE•added 2022/06/30 6:15 p.m.•249 views

CVE-2022-34793

Jenkins Recipe Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

8.8CVSS8.6AI score0.0167EPSS