Authorization Flaw in BlazeMeter Jenkins Plugin by Perforce

CVE-2025-13472

What is CVE-2025-13472?

A vulnerability exists in the BlazeMeter Jenkins Plugin affecting versions prior to 4.27, where insufficient access controls allowed unauthorized users to view sensitive information such as credential IDs, workspace listings, and project IDs in the Jenkins UI. This flaw could lead to unauthorized disclosure of critical data. The recent update addresses these permission issues, enhancing the security of user access to sensitive resources.

References