4.3
Medium
CVE-2025-53660 Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job…
Description
Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins QMetry Test Management Plugin 1.13 | earliest → 1.13 | No fix stated |
References
- Jenkins Security Advisory 2025-07-09 www.jenkins.io
Timeline
- Published
- Last modified