{"action":"Upgrade com.blazemeter.plugins:BlazeMeterJenkinsPlugin to 4.27 or later.","affected":[{"fixed":"4.27","introduced":"0"}],"component":"com.blazemeter.plugins:BlazeMeterJenkinsPlugin","cve_ids":["CVE-2025-13472"],"ecosystem":"Maven","epss":0.00249,"exploited":false,"fixed_versions":["4.27"],"ghsa_id":"GHSA-fxp5-37mh-vff5","id":"tcs_01M5N8WYBZ6BCVRKMK2ZBBQKR3","modified_at":"2025-12-03T20:24:50.270441Z","published_at":"2025-12-03T09:31:13Z","references":["https://osv.dev/vulnerability/GHSA-fxp5-37mh-vff5","https://nvd.nist.gov/vuln/detail/CVE-2025-13472","https://github.com/jenkinsci/blazemeter-plugin/commit/9fe5ed70f063c18fd6b64bb4db3cbdb612f653d4","https://github.com/jenkinsci/blazemeter-plugin","https://portal.perforce.com/s/cve/a91Qi000002bFgTIAU/missing-authorization-in-blazemeter-jenkins-plugin"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-fxp5-37mh-vff5","url":"https://osv.dev/vulnerability/GHSA-fxp5-37mh-vff5"}],"summary":"BlazeMeter Jenkins Plugin is Missing Authorization for Available Resources"}