CVE-2025-53677

The Jenkins Xooa Plugin (version 0.0.7 and earlier) fails to mask the Xooa Deployment Token on the global configuration form, exposing it in plaintext. Additionally, the plugin stores tokens unencrypted in the file io.jenkins.plugins.xooa.GlobConfig.xml. These vulnerabilities allow an attacker wi...