VULNERABILITY INTELLIGENCE

CVE-2025-53675

CVSS score6.5 MEDIUM

EPSS probability0.35%

CISA KEVNot currently listed

Published2025-07-09

Last modified2026-06-17

Description

Jenkins Warrior Framework Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.