CVE-2023-33003

MediumCVSS 4.3

Published: 16/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile - higher than 21% of all known CVEs

Summary

The Tag Profiler plugin in Jenkins version 0.2 and earlier has a cross-site request forgery (CSRF) vulnerability that allows attackers to reset profiler statistics.

Risk Assessment

Attackers can exploit this vulnerability to manipulate statistical data, potentially leading to incorrect analyses and decisions within the organization.

Recommendation

It is recommended to update the Tag Profiler plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

A cross-site request forgery (CSRF) vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics.