CVE-2024-3825

MEDIUM

CSRF in BlazeMeter Jenkins plugin

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-3825 has a selected CVSS score of 4.3 (medium).

Description

Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 22, 2024 · Source: CVE List

Affected products and versions

3
ProductSourceVersion range

BlazeMeter Jenkins plugin

Browse Blazemeter / BlazeMeter Jenkins plugin

Default status: unaffected

CVE List0.0.0 to < 4.22affected

blazemeter_plugin

Browse jenkins / blazemeter_plugin

Default status: unknown

CVE ListBefore 4.22affected

com.blazemeter.plugins:BlazeMeterJenkinsPlugin

Browse Maven / com.blazemeter.plugins:BlazeMeterJenkinsPlugin
GitHub AdvisoryBefore 4.22 · Fixed in 4.22affected

References

4