Lucene search
K

4 matches found

Snyk
Snyk
added 2025/07/09 4:49 p.m.4 views

Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the job configuration form. An attacker can obtain sensitive API keys by viewing the exposed values in the configuration interface. Remediation There is no fixed version for...

5.1CVSS6.9AI score0.00121EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/09 3:39 p.m.2 views

CVE-2025-53661

Jenkins Testsigma Test Plan run Plugin 1.6 and earlier does not mask Testsigma API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...

7AI score0.00121EPSS
Exploits0References1
CVE
CVE
added 2025/07/09 3:39 p.m.18 views

CVE-2025-53661

CVE-2025-53661 affects Jenkins’ Testsigma Test Plan run Plugin (versions 1.6 and earlier). The vulnerability arises because the plugin does not mask Testsigma API keys that are displayed on the job configuration form, creating a real risk that attackers can observe or capture these keys. The issu...

4.3CVSS6.5AI score0.00121EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/07/09 12:0 a.m.2 views

PT-2025-28913 · Jenkins · Jenkins Testsigma Test Plan Run Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Testsigma Test Plan run Plugin versions 1.6 and earlier Description: The Jenkins Testsigma Test Plan run Plugin does not mask Testsigma API keys displayed on the job configuration form. This increases the potential for attackers to...

4.3CVSS5.8AI score0.00121EPSS
Exploits0References8
Rows per page
Query Builder