CVE-2025-53674
MEDIUMJenkins Sensedia Api Platform tools Plugin 1.0 - Info Disclosure
Title source: llmDescription
Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it.
Scores
CVSS v3
5.3
EPSS
0.0004
EPSS Percentile
11.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-256
Status
published
Affected Products (2)
jenkins/sensedia_api_platform_tools
org.jenkins-ci.plugins/sensedia-api-platform
Maven
Timeline
Published
Jul 09, 2025
Tracked Since
Feb 18, 2026