Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

jenkins / chef_sinatra CVEs

Beta · best-effort

5 CVEs tagged to jenkins / chef_sinatra — 0 Critical, 3 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to jenkins vendor archive

CVE-2022-25209

Published Feb 15, 2022

Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2022-25208

Published Feb 15, 2022

A missing permission check in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers with Overall/Read permission to have Jenkins send an HTTP request to an attacker-contro…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2022-25207

Published Feb 15, 2022

A cross-site request forgery (CSRF) vulnerability in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-controlled U…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2019-1003087

Published Apr 4, 2019

A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-1003086

Published Apr 4, 2019

A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers t…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1