Executive brief
Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
Affected products
- Maven org.jenkinsci.plugins:octoperf
Junglewise Threat Intelligence
CVE-2023-28674: Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
CVE-2023-28674 · Severity: low · CVSS 3.1 · Published 2023-04-02
Technologies: org.jenkinsci.plugins:octoperf (Maven). Vendors: Maven.
Related threats
- Jenkins OctoPerf Load Testing Plugin missing permission check allows for unauthorized server connections
- Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
- Jenkins OctoPerf Load Testing Plugin vulnerable to credential capture
- Jenkins OctoPerf Load Testing Plugin missing permission check allows for ID enumeration