CVE-2025-53677 — Jenkins Project / Jenkins Xooa Plugin

CVE-2025-53677

Jenkins Project / Jenkins Xooa Plugin PUBLISHED

Description (CNA)

Jenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form, increasing the potential for attackers to observe and capture it.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins Xooa Plugin	affected 0 through 0.0.7

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3522

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2025/07/09/4