CVE-2023-33005

MediumCVSS 5.4

Published: 16/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

34th percentile - higher than 34% of all known CVEs

WSO2 Oauth Plugin for Jenkins version 1.0 and earlier does not invalidate the previous session on login.

This may lead to unauthorized access if a user does not properly log out of the system.

It is recommended to update the plugin to the latest version to ensure previous sessions are invalidated upon login.

Original NVD description (English source)

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on login.