CVEvulnerability
CVE-2025-53661
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-07-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-522
Description
Jenkins Testsigma Test Plan run Plugin 1.6 and earlier does not mask Testsigma API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Affected configurations
• jenkins testsigma test plan run (<= 1.6)
Related
Weakness · CWE (1)
- CWE-522 Insufficiently Protected Credentials weakness
References
- https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3515 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2025/07/09/4 www.openwall.com