Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2025-53674

Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it.

Published: Jul 9, 2025
Updated: Nov 24, 2025
CVE: CVE-2025-53674
GHSA: GHSA-vx57-hphr-3mr9
Severity: Medium
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWEs:

CWE-256

OWASP TOP 10:

A2 - Broken Authentication

Affected Software
References

Software	From	Fixed in
org.jenkins-ci.plugins / sensedia-api-platform	-	1.0.x
jenkins / sensedia_api_platform_tools	1.0	1.0.x

http://www.openwall.com/lists/oss-security/2025/07/09/4
https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3551

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo