CVE-2025-53678

The Jenkins User1st uTester Plugin (version 1.1 and earlier ) is vulnerable to insecure storage of sensitive information. The plugin stores the uTester JWT token unencrypted within its global configuration file (io.jenkins.plugins.user1st.utester.UTesterPlugin.xml ) on the Jenkins controller. An ...