CVE Catalog
CVE-2023-33004
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.43%
34th percentile - higher than 34% of all known CVEs
Summary
A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics.
Risk Assessment
Attackers can manipulate statistical data, potentially leading to incorrect analyses and decisions within the organization.
Recommendation
It is recommended to update the Tag Profiler plugin to the latest version to mitigate this security vulnerability.
Original NVD description (English source)
A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics.