CVE-2025-24400

The Jenkins Eiffel Broadcaster Plugin versions 2.8.0 through 2.10.2 (both inclusive) are vulnerable to a cache confusion issue. The plugin improperly uses the credential ID as a cache key during signing operations. This allows an attacker to create a malicious credential with the same ID as a leg...