CVE-2025-53743

Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53743

Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

CVE-2025-53742

Jenkins Applitools Eyes Plugin 1.16.5 and earlier stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53742

CVE-2025-53742 affects Jenkins Applitools Eyes Plugin 1.16.5 and earlier. The vulnerability arises because Applitools API keys are stored unencrypted in job config.xml files on the Jenkins controller, allowing view by users with Item/Extended Read permission or access to the Jenkins controller fi...

CVE-2025-53658

Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not escape the Applitools URL on the build page, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2025-53658

Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not escape the Applitools URL on the build page, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

CVE-2025-53658

CVE-2025-53658 affects Jenkins Applitools Eyes Plugin (versions 1.16.5 and earlier). The vulnerability is a stored XSS on the build page caused by not escaping the Applitools URL, exploitable by attackers with Item/Configure permission. The issue is confirmed across multiple sources (including Je...

PT-2025-28932 · Jenkins · Jenkins Applitools Eyes Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Applitools Eyes Plugin versions 1.16.5 and earlier Description: The Jenkins Applitools Eyes Plugin does not mask Applitools API keys displayed on the job configuration form. This increases the potential for attackers to observe and...

PT-2025-28910 · Jenkins · Jenkins Applitools Eyes Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Applitools Eyes Plugin versions 1.16.5 and earlier Description: The Jenkins Applitools Eyes Plugin does not properly escape the Applitools URL displayed on the build page, leading to a stored cross-site scripting XSS issue. An attacke...

PT-2025-28931 · Cloudbees +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Applitools Eyes Plugin versions 1.16.5 and earlier Description: The Jenkins Applitools Eyes Plugin stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller. Users with Item/Extended Read permission or...

Jenkins plugin Applitools Eyes 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

Jenkins plugin Applitools Eyes 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

Jenkins plugin Applitools Eyes 安全漏洞

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security...

Malicious Package

Overview selenium-applitools is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Note: This malicious package was uncovered by o...

MAL-2022-5998 Malicious code in selenium-applitools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f3935fd94ed2b7cc1fab768dbb6e1a0bce1f8c28bf1c675df20ca6fdb8ff9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in selenium-applitools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f3935fd94ed2b7cc1fab768dbb6e1a0bce1f8c28bf1c675df20ca6fdb8ff9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...