CVEvulnerability
CVE-2025-53677
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-07-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-256
Description
Jenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form, increasing the potential for attackers to observe and capture it.
Affected configurations
• jenkins xooa (<= 0.0.7)
Related
Weakness · CWE (1)
- CWE-256 Plaintext Storage of a Password weakness
References
- https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3522 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2025/07/09/4 www.openwall.com