BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.

Security releases

Jenkins

Jenkins Security Advisory 2025-07-09

2025-07-09 Jul 9, 2025 Source: Vendor

Imported by the Jenkins advisory catcher from https://www.jenkins.io/security/advisory/2025-07-09/. 21 SECURITY issues listed. Draft. Review before publishing.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.jenkins.io/security/advisory/2025-07-09/
Are you credited here? Sign in and claim your line: it is yours immediately, no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

25 lines
All 25 CVEs 25 Additional recognition 0 Unclaimed only
Showing 1–25 of 25
CVE-2025-53664 BR2025-0000-008760 SECURITY-3540 unclaimed
Tokens stored and displayed in plain text by Apica Loadtest Plugin
Credited as Aris ISSAD, Aix Marseille University
CVE-2025-53662 BR2025-0000-008761 SECURITY-3541 unclaimed
Keys stored in plain text by IFTTT Build Notifier Plugin
Credited as Aris ISSAD, Aix Marseille University
CVE-2025-53653 BR2025-0000-008762 SECURITY-3542 unclaimed
Tokens stored in plain text by Aqua Security Scanner Plugin
Credited as Aris ISSAD, Aix Marseille University
CVE-2025-53651 BR2025-0000-008763 SECURITY-3547 unclaimed
File path information disclosure in HTML Publisher Plugin
Credited as Kyler Katz
CVE-2025-53650 BR2025-0000-008764 SECURITY-3499 unclaimed
Improper masking of credentials in Credentials Binding Plugin
Credited as Rennan Cockles, R3Ck; and, independently, wakeward
CVE-2025-53650 BR2025-0000-008765 SECURITY-3499 unclaimed
Improper masking of credentials in Credentials Binding Plugin
Credited as Ido
CVE-2025-53652 BR2025-0000-008766 SECURITY-3419 unclaimed
Missing input validation for parameter values in Git Parameter Plugin
Credited as Roman Nahornyi, Praxis Tech Ltd
CVE-2025-53675 BR2025-0000-008767 SECURITY-3516 unclaimed
Passwords stored in plain text by Warrior Framework Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-53676 BR2025-0000-008768 SECURITY-3522 unclaimed
Token stored and displayed in plain text by Xooa Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-53666 BR2025-0000-008769 SECURITY-3524 unclaimed
Tokens stored and displayed in plain text by Dead Man's Snitch Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-53672 BR2025-0000-008770 SECURITY-3525 unclaimed
API key stored in plain text by Kryptowire Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-53670 BR2025-0000-008771 SECURITY-3526 unclaimed
Keys stored and displayed in plain text by Nouvola DiveCloud Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-53673 BR2025-0000-008772 SECURITY-3551 unclaimed
Token stored and displayed in plain text by Sensedia Api Platform tools Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-53663 BR2025-0000-008773 SECURITY-3552 unclaimed
Tokens stored in plain text by IBM Cloud DevOps Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-53654 BR2025-0000-008774 SECURITY-3554 unclaimed
AWS Secret Key stored and displayed in plain text by Statistics Gatherer Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-53668 BR2025-0000-008775 SECURITY-3527 unclaimed
API Auth keys stored and displayed in plain text by VAddy Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-53668 BR2025-0000-008776 SECURITY-3527 unclaimed
API Auth keys stored and displayed in plain text by VAddy Plugin
Credited as Vincent Lardet, Aix Marseille University
CVE-2025-53656 BR2025-0000-008777 SECURITY-3556 unclaimed
Credentials stored and displayed in plain text by ReadyAPI Functional Testing Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-53656 BR2025-0000-008778 SECURITY-3556 unclaimed
Credentials stored and displayed in plain text by ReadyAPI Functional Testing Plugin
Credited as Vincent Lardet, Aix Marseille University
CVE-2025-53658 BR2025-0000-008779 SECURITY-3509 unclaimed
Stored XSS vulnerability in Applitools Eyes Plugin
Credited as Said Abdesslem Messadi, Aix Marseille University
CVE-2025-53742 BR2025-0000-008780 SECURITY-3510 unclaimed
API keys stored and displayed in plain text by Applitools Eyes Plugin
Credited as Said Abdesslem Messadi, Aix Marseille University
CVE-2025-53678 BR2025-0000-008781 SECURITY-3518 unclaimed
Token stored in plain text by User1st uTester Plugin
Credited as Vincent Lardet, Aix Marseille University
CVE-2025-53678 BR2025-0000-008782 SECURITY-3518 unclaimed
Token stored in plain text by User1st uTester Plugin
Credited as Romuald Moisan, Aix Marseille University
CVE-2025-53661 BR2025-0000-008783 SECURITY-3515 unclaimed
API keys displayed without masking by Testsigma Test Plan run Plugin
Credited as Zaoui Zakariae, Aix Marseille University
CVE-2025-53659 BR2025-0000-008784 SECURITY-3532 unclaimed
API keys stored and displayed in plain text by QMetry Test Management Plugin
Credited as Zaoui Zakariae, Aix Marseille University