CVE-2025-53651 — Jenkins Project / Jenkins HTML Publisher Plugin

CVE-2025-53651

Jenkins Project / Jenkins HTML Publisher Plugin PUBLISHED

Description (CNA)

Jenkins HTML Publisher Plugin 425 and earlier displays log messages that include the absolute paths of files archived during the Publish HTML reports post-build step, exposing information about the Jenkins controller file system in the build log.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins HTML Publisher Plugin	affected 0 through 425

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3547

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2025/07/09/4