Threats tagged 'ghsa-cvg7-767r-w3fq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.3%	CVE-2025-53672Io.jenkins.plugins:kryptowire: Jenkins Kryptowire Plugin vulnerability stores unencrypted Kryptowire API key Medium6.5EPSS 0.3%2025-07-09GCVE DatabaseCVE-2025-53672 Jenkins Kryptowire Plugin versions 0.2 and earlier store the Kryptowire API key unencrypted in a global configuration file on the Jenkins controller. This allows users with file system access to the Jenkins controller to view the API key. No fix is currently available for this vulnerability. EPSS 0.3%Report on CVE-2025-53672 Vulnerability CWE-312 #ghsa-cvg7-767r-w3fq #maven	GCVE Database	2025-07-09

Page 1 of 1