GitHub Advisoryadvisory · Maven

GHSA-vx57-hphr-3mr9 Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens

MEDIUM Published 2025-07-09 Modified 2025-11-05 Official page ↗
Aliases
CVE-2025-53674
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:sensedia-api-platform
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-256
Reviewed
2025-07-09

Affected packages

• Maven org.jenkins-ci.plugins:sensedia-api-platform: <= 1.0 (no fix yet)

Description

Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it.

Related

Alias · CVE (1)

  • CVE-2025-53674 Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form,… vulnerability

Weakness · CWE (1)

  • CWE-256 Plaintext Storage of a Password weakness

References