Sign in

4.3 Medium

CVE-2023-33004 A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read…

Description

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Tag Profiler Plugin 0.2	earliest → 0.2	No fix stated

The 2 CVEs of Jenkins Tag Profiler Plugin →

CVE-2023-33003 A cross-site request forgery (CSRF) vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to… 4.3 Medium

Do you use Jenkins Tag Profiler Plugin?

Track this CVE Watch Jenkins Tag Profiler Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2023-33004

Timeline

Published May 16, 2023
Last modified January 23, 2025

References

Jenkins Security Advisory 2023-05-16 www.jenkins.io

Track this CVE