Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-53660

Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Published

2025-07-09T16:15:25.433

Last Modified

2025-07-18T17:38:13.730

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-256
    CWE-522
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application jenkins qmetry_test_management ≤ 1.13 Yes
References