CVE-2025-53675
Jenkins Warrior Framework Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Exte…
Published: 2025-07-09 · CVSS: 6.5 · CVSS 3.1
Jenkins Warrior Framework Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7