com.blazemeter.plugins vulnerabilities

Products

• com.blazemeter.plugins/BlazeMeterJenkinsPlugin 2

Latest com.blazemeter.plugins CVEs

Newest publication first

1. CVE-2025-13472 Missing authorization in BlazeMeter Jenkins Plugin

   Published 2025-12-03

   Medium·CVSS 5.3 EPSS 0.27%

   A fix was made in BlazeMeter Jenkins Plugin version 4.27 to allow users only with certain permissions to see the list of available resources like credential IDs, bzm workspaces and bzm project Ids. Prior to this fix, anyone could see this list as a dropdown on the Jenkins UI.

2. CVE-2024-3825 CSRF in BlazeMeter Jenkins plugin

   Published 2024-04-17

   Medium·CVSS 4.3 EPSS 0.21%

   Versions of the BlazeMeter Jenkins plugin prior to 4.22 contain a flaw which results in credential enumeration

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.