~ / search / GHSA-r52h-fjm7-93j8

GHSA-r52h-fjm7-93j8

BlazeMeter Jenkins plugin vulnerable to Cross-Site Request Forgery

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-3825

Packages

EcosystemPackageAffectedFixed in
Maven com.blazemeter.plugins:BlazeMeterJenkinsPlugin < 4.22 4.22

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration.

References

External links from the advisory. They lead to third-party sites.