VULNERABILITY INTELLIGENCE

CVE-2025-53661

CVSS score4.3 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2025-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Jenkins Testsigma Test Plan run Plugin 1.6 and earlier does not mask Testsigma API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Weakness classification

  • CWE-522: Insufficiently Protected Credentials

Primary references