CVE-2025-53675

Jenkins Warrior Framework Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

CVE-2025-53675

The CVE-2025-53675 entry describes a vulnerability in the Jenkins Warrior Framework Plugin (versions 1.2 and earlier) where passwords are stored unencrypted in job config.xml on the Jenkins controller. This allows users with Item/Extended Read permission or access to the Jenkins controller filesy...