Executive brief
Jenkins OctoPerf Load Testing Plugin vulnerable to credential capture
Affected products
- Maven org.jenkinsci.plugins:octoperf
Junglewise Threat Intelligence
CVE-2023-28672: Jenkins OctoPerf Load Testing Plugin vulnerable to credential capture
CVE-2023-28672 · Severity: low · CVSS 3.1 · Published 2023-04-02
Technologies: org.jenkinsci.plugins:octoperf (Maven). Vendors: Maven.
Related threats
- Jenkins OctoPerf Load Testing Plugin missing permission check allows for unauthorized server connections
- Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
- Jenkins OctoPerf Load Testing Plugin missing permission check allows for ID enumeration
- Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery