CVE-2025-53671 — Jenkins Project / Jenkins Nouvola DiveCloud Plugin

CVE-2025-53671

Jenkins Project / Jenkins Nouvola DiveCloud Plugin PUBLISHED

Description (CNA)

Jenkins Nouvola DiveCloud Plugin 1.08 and earlier does not mask DiveCloud API Keys and Credentials Encryption Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins Nouvola DiveCloud Plugin	affected 0 through 1.08

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3526

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2025/07/09/4