Cross-Site Scripting (XSS)

Jenkins Gatling is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to bypass of Content-Security-Policy protections when serving Gatling reports, which allows an attacker to inject and execute malicious scripts through modified report content...

EUVD-2025-23856

Malicious code in bioql PyPI...

EUVD-2022-4216

Malicious code in bioql PyPI...

EUVD-2025-23855

Malicious code in bioql PyPI...

EUVD-2025-17299

Malicious code in bioql PyPI...

CVE-2025-51308

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing authorization checks...

CVE-2025-51306

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management...

CVE-2025-51308

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing authorization checks...

CVE-2025-51306

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management...

CVE-2025-51306

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management...

CVE-2025-51306

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management...

CVE-2025-51308

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing authorization checks...

CVE-2025-51308

In Gatling Enterprise versions prior to 1.25.0 , a security vulnerability exists due to missing authorization checks . This flaw allows a low-privileged user without the "admin" role to perform REST API calls on read-only endpoints , enabling them to collect information. To remediate this issue, ...

PT-2025-32181 · Unknown · Gatling Enterprise

Name of the Vulnerable Software and Affected Versions: Gatling Enterprise versions prior to 1.25.0 Description: Gatling Enterprise is susceptible to an issue where a user with limited privileges, lacking the “admin” role, can execute REST API calls on read-only endpoints. This allows unauthorized...

CVE-2025-51306

In Gatling Enterprise versions prior to 1.25.0 , incorrect session management allows a user who has logged out to continue using their session token to access the application without expiration. To remediate this vulnerability, users should update Gatling Enterprise to version 1.25.0 or later. Ex...

Gatling Enterprise 安全漏洞

Gatling Enterprise is a load testing and performance testing management platform from Gatling France. A security vulnerability exists in Gatling Enterprise versions prior to 1.25.0 that stems from improper session management and could result in session tokens remaining available after logout...

Gatling Enterprise 安全漏洞

Gatling Enterprise is a load testing and performance testing management platform from Gatling France. A security vulnerability exists in Gatling Enterprise versions prior to 1.25.0 that stems from a lack of authorization checking and could result in a low-privileged user accessing read-only...

CVE-2025-51308

In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read-only endpoints, allowing him to collect some information, due to missing authorization checks...

CVE-2025-51306: Improper Restriction of Security Token Assignment

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management...

PT-2025-32180 · Gatling · Gatling Enterprise

Name of the Vulnerable Software and Affected Versions: Gatling Enterprise versions prior to 1.25.0 Description: A user logging out of Gatling Enterprise may still be able to use their session token to continue accessing the application without session expiration. This is due to incorrect session...