Jenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration form

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2025-53743 · ADVISORY
• jenkinsci/applitools-eyes-plugin · PACKAGE
• jenkins.io/security/advisory/2025-07-09 · WEB
• openwall.com/lists/oss-security/2025/07/09/4 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:applitools-eyes

• CVE-2025-53742TRUNG BÌNH 6.5Jenkins Applitools Eyes Plugin 1.16.5 and earlier stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller, …
• CVE-2025-53658TRUNG BÌNH 5.4Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not escape the Applitools URL on the build page, resulting in a stored cross-site scr…