Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-53669

Jenkins VAddy Plugin 1.2.8 and earlier does not mask Vaddy API Auth Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Published

2025-07-09T16:15:26.383

Last Modified

2025-07-18T18:47:13.863

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-256
    CWE-522
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application jenkins vaddy ≤ 1.2.8 Yes
References