Vulnerabilities > Jenkins > TAG Profiler

DATE CVE VULNERABILITY TITLE RISK
2023-05-16 CVE-2023-33003 Cross-Site Request Forgery (CSRF) vulnerability in Jenkins TAG Profiler
A cross-site request forgery (CSRF) vulnerability in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers to reset profiler statistics.
network
low complexity
jenkins CWE-352
4.3
2023-05-16 CVE-2023-33004 Incorrect Permission Assignment for Critical Resource vulnerability in Jenkins TAG Profiler
A missing permission check in Jenkins Tag Profiler Plugin 0.2 and earlier allows attackers with Overall/Read permission to reset profiler statistics.
network
low complexity
jenkins CWE-732
4.3