CVE-2025-53677 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Jenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form, increasing the potential for attackers to observ…
Medium CVSS: 5.3

CVE-2025-53677

Jenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form, increasing the potential for attackers to observe and capture it.
Vendor
Jenkins
Product
Xooa
CWE
CWE-256
Yayın Tarihi
2025-07-09 16:15:27
Güncelleme
2025-11-04 22:16:25
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-

Kategoriler

CWE-256 Xooa MEDIUM Jenkins 2025

Referanslar

https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3522 http://www.openwall.com/lists/oss-security/2025/07/09/4