description: A missing permission check in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers with Overall/Read permissions to connect to an attacker-specified webserver using attacker-specified credentials.
affected:
{
product: Jenkins NS-ND Integration Performance Publisher Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 4.8.0.129, status: affected, version: unspecified, versionType: custom
}