Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Jenkins Applitools Eyes Plugin — Jenkins Security Advisory 2025-07-09 Clear all filters
TI-2025-33654 CVE-2025-53743 · GHSA-jmrv-rxgr-phvr

Insufficiently protected credentials in Jenkins Applitools Eyes Plugin

Priority LOW 30

Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00301 Published 2025-07-09 No fix listed CWE-522
TI-2025-33653 CVE-2025-53742 · GHSA-q92v-3f4w-5xg8

Cleartext storage of sensitive information in Jenkins Applitools Eyes Plugin

Priority LOW 28

Jenkins Applitools Eyes Plugin 1.16.5 and earlier stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access t…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00238 Published 2025-07-09 No fix listed CWE-312
TI-2025-33582 CVE-2025-53658 · GHSA-j4wf-9gx8-63f8

Cross-site scripting in Jenkins Applitools Eyes Plugin

Priority LOW 24

Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not escape the Applitools URL on the build page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permissi…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00297 Published 2025-07-09 Fixed in 1.16.6 CWE-79