Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-3825 EUVD-2024-1289GHSA-r52h-fjm7-93j8

CSRF in BlazeMeter Jenkins plugin

Published Apr 17, 2024 · Updated Aug 1, 2024 · Assigned by Perforce

Vendor: Blazemeter Product: BlazeMeter Jenkins plugin Package: com.blazemeter.plugins:BlazeMeterJenkinsPlugin Category: Web / CMS Ecosystem: Maven

Description

Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration

Affected products

VendorProductAffectedFixed
Blazemeter BlazeMeter Jenkins plugin 0.0.0 – < 4.22 4.22

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.blazemeter.plugins:BlazeMeterJenkinsPlugin < 4.22 4.22 GHSA-r52h-fjm7-93j8

References