medium4.3
CVE-2024-3825
BlazeMeter Jenkins plugin vulnerable to Cross-Site Request Forgery
Impact
Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.blazemeter.plugins:BlazeMeterJenkinsPlugin | < 4.22 | 4.22 |
Affected products
| Product | Affected versions |
|---|---|
| BlazeMeter Jenkins Plugin | before 4.22 |
Versions were read from the advisory text. No structured product data has been published for this record yet.