Threats tagged 'ghsa-962q-84v8-hxhj'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2025-53660Org.jenkins ci.plugins:qmetry test management: Jenkins QMetry Test Management Plugin vulnerability exposes API keys Medium4.3EPSS 0.3%2025-07-09GCVE DatabaseCVE-2025-53660 The Jenkins QMetry Test Management Plugin version 1.13 and earlier stores QMetry Automation API keys unencrypted in job configuration files on the Jenkins controller. These keys are accessible to users with Item/Extended Read permission or those with access to the Jenkins controller file system. Additionally, the job configuration form does not mask these API keys, increasing the risk of exposure. No fix is currently available for this vulnerability. EPSS 0.3%Report on CVE-2025-53660 Vulnerability CWE-256 #ghsa-962q-84v8-hxhj #maven	GCVE Database	2025-07-09

Page 1 of 1