CVE-2025-53743

The Jenkins Applitools Eyes Plugin (version 1.16.5 and earlier ) contains an Insufficiently Protected Credentials vulnerability. The plugin fails to mask Applitools API keys on the job configuration form, potentially allowing attackers to observe and capture sensitive credentials. Additionally, k...

CVE-2025-53742

The Jenkins Applitools Eyes Plugin version 1.16.5 and earlier is vulnerable to CWE-312 (Cleartext Storage of Sensitive Information) . The plugin stores Applitools API keys unencrypted within the job config.xml files on the Jenkins controller. Consequently, any user possessing Item/Extended Read p...

CVE-2025-53658

The Jenkins Applitools Eyes Plugin (version 1.16.5 and earlier ) is vulnerable to stored cross-site scripting (XSS) because it fails to escape the Applitools URL on the build page. An attacker with Item/Configure permissions can inject malicious scripts into this field, which are then executed in...