CVE-2025-53660

The Jenkins QMetry Test Management Plugin (version 1.13 and earlier ) contains a vulnerability where Qmetry Automation API Keys are stored unencrypted in the config.xml files on the Jenkins controller. These keys can be viewed by users with Item/Extended Read permissions or by anyone with access ...

CVE-2025-53659

The Jenkins QMetry Test Management Plugin (version 1.13 and earlier) is vulnerable to information disclosure because it stores Qmetry Automation API Keys unencrypted in the job config.xml files on the Jenkins controller. These keys can be viewed by users with Item/Extended Read permission or by a...