GHSA-mr75-899x-qcxq
GitHub Security Advisory
Missing permission checks in Jenkins Chaos Monkey Plugin
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
Jenkins Chaos Monkey Plugin 0.3 and earlier does not perform permission checks in several HTTP endpoints.
This allows attackers with Overall/Read permission to generate load and to generate memory leaks.
Jenkins Chaos Monkey Plugin 0.4 requires Overall/Administer permission to generate load and to generate memory leaks.
Affected Packages
Maven
io.jenkins.plugins:chaos-monkey
Affected versions:
0
(fixed in 0.4)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: August 24, 2025 6:28 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.