Jenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration form

MITTEL 5.3CVE-2025-53743 · GHSA-jmrv-rxgr-phvr · Published 09/07/2025 · updated 17/06/2026

Kurz gesagt

CVE-2025-53743 ist eine Schwachstelle (MITTEL (CVSS 5.3)) in org.jenkins-ci.plugins:applitools-eyes, applitools eyes (jenkins).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.30%, höher als bei 22.9% aller Schwachstellen.
Abhilfe: auf 1.16.6 oder neuer aktualisieren.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:applitools-eyes Maven	`≤ 1.16.5`	No fix yet
applitools eyes jenkins	`< 1.16.6`	`1.16.6`

Description

Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

NVD description

Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

References

nvd.nist.gov/vuln/detail/CVE-2025-53743 · ADVISORY
jenkinsci/applitools-eyes-plugin · PACKAGE
jenkins.io/security/advisory/2025-07-09 · WEB
openwall.com/lists/oss-security/2025/07/09/4 · WEB

Weitere Schwachstellen in org.jenkins-ci.plugins:applitools-eyes

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.jenkins-ci.plugins:applitools-eyes

Maven

≤ 1.16.5

No fix yet

applitools eyes

jenkins

< 1.16.6

1.16.6

Description

Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

NVD description

Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Weitere Schwachstellen in org.jenkins-ci.plugins:applitools-eyes

Alle anzeigen →