Threats Tagged 'cve-2025-67641'
View all threats tagged with 'cve-2025-67641'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-67641'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2025-67641 is a high-severity stored cross-site scripting (XSS) vulnerability in the Jenkins Coverage Plugin versions 2.3054.ve1ff7b_a_a_123b_ and earlier. The flaw arises because the plugin does not properly validate the coverage results ID when configured via the REST API, allowing attackers with Item/Configure permission to inject a `javascript:` scheme URL as an identifier. This vulnerability requires authentication and user interaction but can lead to full compromise of confidentiality, integrity, and availability within the Jenkins environment. No known exploits are currently reported in the wild. The vulnerability impacts Jenkins installations using the Coverage Plugin, which is widely used in continuous integration pipelines, including in European organizations. Mitigation involves restricting Item/Configure permissions, monitoring REST API usage, and applying patches once available. Countries with significant software development sectors and Jenkins adoption, such as Germany, France, and the UK, are most likely to be affected. Join the discussion | CVE Database V5 | 12/10/2025, 16:50:39 UTC Added: 12/10/2025, 16:57:19 UTC |
Showing 1 to 1 of 1 result