Login Request a demo
CS
Product
Chef Sinatra
by Jenkins · last CVE Feb 15, 2022
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 0
Severity
All severities5Critical0High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Chef Sinatra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-25209
8.8
1%
Feb 15
Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks
Affected: through 1.20
CVE-2022-25208
8.8
1%
Feb 15
A missing permission check in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers with Overall/Read permission to have Jenkins send an HTTP request to an…
Affected: through 1.20
CVE-2022-25207
8.8
1%
Feb 15
A cross-site request forgery (CSRF) vulnerability in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers to have Jenkins send an HTTP request to an attacker-controlled…
Affected: through 1.20
CVE-2019-1003087
6.5
2%
Apr 4
A missing permission check in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers with Overall/Read…
Affected: through 1.2
CVE-2019-1003086
6.5
1%
Apr 4
A cross-site request forgery vulnerability in Jenkins Chef Sinatra Plugin in the ChefBuilderConfiguration.DescriptorImpl#doTestConnection form validation method allows attackers…
Affected: All versions, or not specified
Showing 5