Jenkins OctoPerf Load Testing Plugin Plugin

4 results · Clear filters · Feed

• Medium 4.3
  CVE-2023-28675

  Jenkins OctoPerf Load Testing Plugin missing permission check allows for unauthorized server connections

  A missing permission check in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers to connect to a previously configured Octoperf server using attacker-specified credentials.

  Jenkins Project Jenkins OctoPerf Load Testing Plugin Plugin org.jenkinsci.plugins:octoperf Web / CMS Maven
  Mar 23, 2023
• Medium 4.3
  CVE-2023-28673

  Jenkins OctoPerf Load Testing Plugin missing permission check allows for ID enumeration

  A missing permission check in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.

  Jenkins Project Jenkins OctoPerf Load Testing Plugin Plugin org.jenkinsci.plugins:octoperf Web / CMS Maven
  Mar 23, 2023
• Medium 6.5
  CVE-2023-28672

  Jenkins OctoPerf Load Testing Plugin vulnerable to credential capture

  Jenkins OctoPerf Load Testing Plugin Plugin 4.5.1 and earlier does not perform a permission check in a connection test HTTP endpoint, allowing attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials …

  Jenkins Project Jenkins OctoPerf Load Testing Plugin Plugin org.jenkinsci.plugins:octoperf Web / CMS Maven
  Mar 23, 2023
• Medium 4.3
  CVE-2023-28671

  Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery

  A cross-site request forgery (CSRF) vulnerability in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing cre…

  Jenkins Project Jenkins OctoPerf Load Testing Plugin Plugin org.jenkinsci.plugins:octoperf Web / CMS Maven
  Mar 23, 2023