Threats tagged 'ghsa-mr49-vmp6-2pwq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.2%	CVE-2025-53668Org.jenkins ci.plugins:vaddy plugin: Jenkins VAddy Plugin vulnerability exposes unencrypted keys to certain Medium6.5EPSS 0.2%2025-07-09GCVE DatabaseCVE-2025-53668 Jenkins VAddy Plugin versions 1.2.8 and earlier store VAddy API authentication keys unencrypted in job config.xml files on the Jenkins controller. This exposure allows users with Item/Extended Read permissions or access to the Jenkins controller file system to view these sensitive keys. The vulnerability has a medium severity with a CVSS score of 4.3. EPSS 0.2%Report on CVE-2025-53668 Vulnerability CWE-311 #ghsa-mr49-vmp6-2pwq #maven	GCVE Database	2025-07-09

Page 1 of 1