CVE-2025-53660

Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53660

Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53660

Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53660

The Jenkins QMetry Test Management Plugin (version 1.13 and earlier) fails to mask Qmetry Automation API Keys on the job configuration form. Additionally, these keys are stored unencrypted in the config.xml files on the Jenkins controller, where they can be accessed by users with Item/Extended Re...