6.5 Medium

CVE-2025-53671 Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys…

Description

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Nouvola DiveCloud Plugin 1.08	earliest → 1.08	No fix stated

The 2 CVEs of Jenkins Nouvola DiveCloud Plugin →

CVE-2025-53670 Jenkins Nouvola DiveCloud Plugin 1.08 and earlier stores DiveCloud API Keys and Credentials Encryption Keys… 6.5 Medium

Do you use Jenkins Nouvola DiveCloud Plugin?

Track this CVE Watch Jenkins Nouvola DiveCloud Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2025-53671

Timeline

Published July 9, 2025
Last modified November 4, 2025

References

Jenkins Security Advisory 2025-07-09 www.jenkins.io

Track this CVE

CVE-2025-53671 Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys…

Description

Affected products and versions

Other CVEs of Jenkins Nouvola DiveCloud Plugin