Jenkins Octoperf Load Testing
5 CVEs affecting Jenkins Octoperf Load Testing. Latest disclosed: 2023-04-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-28674 | High | 8.8 | 2023-04-02 | A cross-site request forgery (CSRF) vulnerability in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers to connect to a previously… |
CVE-2023-28672 | Medium | 6.5 | 2023-04-02 | Jenkins OctoPerf Load Testing Plugin Plugin 4.5.1 and earlier does not perform a permission check in a connection test HTTP endpoint, allowing attackers with O… |
CVE-2023-28675 | Medium | 4.3 | 2023-04-02 | A missing permission check in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers to connect to a previously configured Octoperf ser… |
CVE-2023-28673 | Medium | 4.3 | 2023-04-02 | A missing permission check in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.2 and earlier allows attackers with Overall/Read permission to enumerate credenti… |
CVE-2023-28671 | Medium | 4.3 | 2023-04-02 | A cross-site request forgery (CSRF) vulnerability in Jenkins OctoPerf Load Testing Plugin Plugin 4.5.0 and earlier allows attackers to connect to an attacker-s… |