EUVD-2025-202459

Jenkins's build authorization token is stored and displayed in plain text...

org.jenkins-ci.main:jenkins-test-harness (1.619), org.jenkins-ci.main:jenkins-war (1.619) +4 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.619)

org.jenkins-ci.main:jenkins-core MAVEN version 1.619 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.619 - org.jenkins-ci.main:jenkins-war 1.619 -...

org.jenkins-ci.main:jenkins-test-harness (1.619), org.jenkins-ci.main:jenkins-war (1.619) +4 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.619)

org.jenkins-ci.main:jenkins-core MAVEN version 1.619 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.619 - org.jenkins-ci.main:jenkins-war 1.619 -...

org.jenkins-ci.main:jenkins-test-harness (1.554.2), org.jenkins-ci.main:jenkins-war (1.554.2) +6 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.554.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.554.2 - org.jenkins-ci.main:jenkins-war 1.554.2 -...

org.jenkins-ci.main:jenkins-test-harness (1.554.2), org.jenkins-ci.main:jenkins-war (1.554.2) +6 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.554.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.554.2 - org.jenkins-ci.main:jenkins-war 1.554.2 -...

com.loadimpact:loadimpact-plugin (>=1.53, <=1.58), org.jenkins-ci.main:jenkins-test-harness (1.535) +5 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.535)

org.jenkins-ci.main:jenkins-core MAVEN version 1.535 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.loadimpact:loadimpact-plugin =1.53, =1.18, =1.1, =1.2 - org.jenkins-ci.plugins:plugin 1.535...

org.jenkins-ci.main:jenkins-test-harness (1.555), org.jenkins-ci.main:jenkins-war (1.555) +4 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.555)

org.jenkins-ci.main:jenkins-core MAVEN version 1.555 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.555 - org.jenkins-ci.main:jenkins-war 1.555 -...

com.loadimpact:loadimpact-plugin (>=1.53, <=1.58), org.jenkins-ci.main:jenkins-core (1.535) +6 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.535)

org.jenkins-ci.main:cli MAVEN version 1.535 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - com.loadimpact:loadimpact-plugin =1.53, =1.18, =1.1, =1.2 - org.jenkins-ci.plugins:plugin 1.535 Source cves:...

net.sleepymouse.jenkins.plugins:rpi-build-status (0.7), org.jenkins-ci.main:jenkins-war (1.658) +2 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.658)

org.jenkins-ci.main:jenkins-core MAVEN version 1.658 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.sleepymouse.jenkins.plugins:rpi-build-status 0.7 - org.jenkins-ci.main:jenkins-war 1.658 -...

com.castlemon.hudson:cucumber-perf (>=1.1, <=2.0.6), org.jenkins-ci.main:jenkins-test-harness (1.519) +5 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.519)

org.jenkins-ci.main:jenkins-core MAVEN version 1.519 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.castlemon.hudson:cucumber-perf =1.1, =1.3.4, =1.3.5 - org.jenkins-ci.plugins:plugin 1.519...

com.cloudbees.plugins:build-flow-plugin (0.18), com.companyline.hall.jenkins:hall-jenkins (>=1.0, <=1.2) +35 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.509.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.plugins:build-flow-plugin 0.18 - com.companyline.hall.jenkins:hall-jenkins =1.0...

org.jenkins-ci.main:jenkins-test-harness (1.642), org.jenkins-ci.main:jenkins-war (1.642) +6 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.642)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.642 - org.jenkins-ci.main:jenkins-war 1.642 -...

org.jenkins-ci.main:jenkins-war (1.645), org.jenkins-ci.main:test (1.645) +5 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.645)

org.jenkins-ci.main:jenkins-core MAVEN version 1.645 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.645 - org.jenkins-ci.main:test 1.645 -...

org.jenkins-ci.main:jenkins-core (1.645), org.jenkins-ci.main:jenkins-war (1.645) +6 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.645)

org.jenkins-ci.main:cli MAVEN version 1.645 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - org.jenkins-ci.main:jenkins-core 1.645 - org.jenkins-ci.main:jenkins-war 1.645 - org.jenkins-ci.main:test 1.645 -...

net.sleepymouse.jenkins.plugins:rpi-build-status (0.7), org.jenkins-ci.main:jenkins-core (1.658) +3 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:cli (1.658)

org.jenkins-ci.main:cli MAVEN version 1.658 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:cli and may be impacted: - net.sleepymouse.jenkins.plugins:rpi-build-status 0.7 - org.jenkins-ci.main:jenkins-core 1.658 -...

EUVD-2025-202458

Jenkins's build authorization token is stored and displayed in plain text...

com.coravy.hudson.plugins.github:github (>=0.5, <=0.8), com.sonyericsson.hudson.plugins.gerrit:build-config (>=1.2.2, <=1.2.9) +34 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.400)

org.jenkins-ci.main:jenkins-core MAVEN version 1.400 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =0.5, =1.2.2, =1.2.2, =2.3.0, =1.4, =1.8, =1.10, =0.1.2...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (0.3), org.jenkins-ci.main:jenkins-test-harness (1.554.3) +34 more potentially affected by CVE-2025-67639 via org.jenkins-ci.main:jenkins-core (1.554.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin 0.3 -...

org.jenkins-ci.main:jenkins-test-harness (1.521), org.jenkins-ci.main:jenkins-war (1.521) +9 more potentially affected by CVE-2025-67635 via org.jenkins-ci.main:jenkins-core (1.521)

org.jenkins-ci.main:jenkins-core MAVEN version 1.521 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.521 - org.jenkins-ci.main:jenkins-war 1.521 -...

org.jenkins-ci.main:jenkins-test-harness (1.554.2), org.jenkins-ci.main:jenkins-war (1.554.2) +6 more potentially affected by CVE-2025-67636 via org.jenkins-ci.main:jenkins-core (1.554.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.554.2 - org.jenkins-ci.main:jenkins-war 1.554.2 -...