CVE-2025-53678

CVE-2025-53678 affects Jenkins User1st uTester Plugin versions 1.1 and earlier. The vulnerability is that the uTester JWT token is stored unencrypted in the plugin’s global configuration file on the Jenkins controller, allowing any user with access to the controller’s filesystem to view the token...