Jenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form, increasing the potential for attackers to observe and capture it.
2025-07-09T16:15:27.240
2025-10-03T00:50:21.460
Analyzed
CVSSv3.1: 5.3 (MEDIUM)