CVE-2025-53676 in Xooa Plugin

Tóm tắt

Bởi MITRE • 09/07/2025

Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• chịu trách nhiệm: Jenkins
• Đặt trước: 08/07/2025
• Tiết lộ: 09/07/2025
• Kiểm duyệt: được chấp nhận
• mục: VDB-315837
• CPE: sẵn sàng
• CWE: CWE-200 (Đã xác nhận)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00207
• KEV: không
• Các hoạt động: rất thấp
• ngành: Telecommunication

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-53676
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-53676
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-53676/