Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-33004 EUVD-2023-1527GHSA-cpc3-gm2x-mrvp

Jenkins Tag Profiler Plugin missing permission check

Published May 16, 2023 · Updated Jan 23, 2025 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Tag Profiler Plugin Package: org.jenkins-ci.plugins:tag-profiler Category: Web / CMS Ecosystem: Maven

Description

A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins Tag Profiler Plugin ≤ 0.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:tag-profiler <= 0.2 — GHSA-cpc3-gm2x-mrvp

Advisories 1

References