← volver
CVE-2025-53660

CVE-2025-53660

CVSS 4.3 MEDIUMEPSS 0.2%CWE-256CWE-522
Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Productos afectados
Jenkins Project · Jenkins QMetry Test Management Plugin

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3532http://www.openwall.com/lists/oss-security/2025/07/09/4