{"id":"CVE-2024-3825","aliases":["GHSA-r52h-fjm7-93j8"],"url":"https://o3.security/vulnerability/CVE-2024-3825","summary":"BlazeMeter Jenkins plugin vulnerable to Cross-Site Request Forgery","details":"Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration\n","published":"2024-04-17T15:15:07.463Z","modified":"2026-07-09T14:42:20.308056Z","cvss":{"score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"com.blazemeter.plugins:BlazeMeterJenkinsPlugin","fixedVersion":"4.22"}],"fix":{"url":"https://github.com/Blazemeter/blazemeter-jenkins-plugin/commit/11ec94f68136a0612ae1b37b5370053132cb2528","label":"Blazemeter/blazemeter-jenkins-plugin@11ec94f"},"references":[{"type":"WEB","url":"https://portal.perforce.com/s/detail/a91PA000001STsvYAG"},{"type":"FIX","url":"https://github.com/Blazemeter/blazemeter-jenkins-plugin/commit/11ec94f68136a0612ae1b37b5370053132cb2528"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T14:42:20.308056Z"}}