Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-33003 EUVD-2023-1465GHSA-49f2-j3pp-22jm

Jenkins Tag Profiler Plugin vulnerable to Cross-Site Request Forgery

Published May 16, 2023 · Updated Jan 23, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Tag Profiler Plugin Package: org.jenkins-ci.plugins:tag-profiler Category: Web / CMS Ecosystem: Maven

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins Tag Profiler Plugin ≤ 0.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:tag-profiler <= 0.2 — GHSA-49f2-j3pp-22jm

Advisories 1

References