Skip to content
Sign in
5.3 Medium

CVE-2025-53677 Jenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form,…

Description

Jenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form, increasing the potential for attackers to observe and capture it.

Affected products and versions

Product Affected versions Fixed in
Jenkins Xooa Plugin 0.0 earliest → 0.0.7 No fix stated

Other CVEs of Jenkins Xooa Plugin

The 2 CVEs of Jenkins Xooa Plugin →
CVE-2025-53676 Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on… 6.5 Medium
Track this CVE