Threats tagged 'ghsa-45hr-8gq6-7f7f'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.2%	CVE-2025-53670Org.jenkins ci.plugins:nouvola divecloud: Jenkins Nouvola DiveCloud Plugin vulnerability stores unencrypted Medium6.5EPSS 0.2%2025-07-09GCVE DatabaseCVE-2025-53670 Jenkins Nouvola DiveCloud Plugin versions 1.08 and earlier store DiveCloud API Keys and Credentials Encryption Keys unencrypted in job config.xml files on the Jenkins controller. This exposure allows users with Item/Extended Read permission or file system access to view sensitive credentials. The vulnerability has a medium severity with a CVSS score of 4.3. EPSS 0.2%Report on CVE-2025-53670 Vulnerability CWE-312 #ghsa-45hr-8gq6-7f7f #maven	GCVE Database	2025-07-09

Page 1 of 1