Lucene search
+L

1 matches found

OSV
OSV
added 2023/04/02 9:30 p.m.32 views

GHSA-P3W6-3F7F-PM98 Jenkins OctoPerf Load Testing Plugin missing permission check allows for unauthorized server connections

Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier does not perform permission checks in several HTTP endpoints. This allows attackers with Overall/Read permission to connect to a previously configured Octoperf server using attacker-specified credentials. Additionally, these endpoints ...

4.3CVSS4.8AI score0.00425EPSS
SaveExploits0References3
Rows per page
Query Builder