Sign in

4.3 Medium

CVE-2023-33003 A cross-site request forgery (CSRF) vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to…

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Tag Profiler Plugin 0.2	earliest → 0.2	No fix stated

The 2 CVEs of Jenkins Tag Profiler Plugin →

CVE-2023-33004 A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read… 4.3 Medium

Do you use Jenkins Tag Profiler Plugin?

Track this CVE Watch Jenkins Tag Profiler Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-33003

Timeline

Published May 16, 2023
Last modified January 23, 2025

References

Jenkins Security Advisory 2023-05-16 www.jenkins.io

Track this CVE