Threats tagged 'ghsa-jmrv-rxgr-phvr'

Jenkins Applitools Eyes Plugin versions 1.16.5 and earlier expose Applitools API keys in the job configuration form without masking them. This vulnerability increases the risk that attackers with access to the Jenkins interface could observe and capture these sensitive API keys. The issue has a medium severity with a CVSS score of 4.3, reflecting limited confidentiality impact and requiring low privileges for exploitation. No official patch or fix is currently indicated in the available data.