deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-38253
Published: 2025-07-09
Description: In the Linux kernel, the following vulnerability has been resolved:

HID: wacom: fix crash in wacom_aes_battery_handler()

Commit fd2a9b29dc9c ("HID: wacom: Remove AES power_supply after extended
inactivity") introduced wacom_aes_battery_handler() which is scheduled
as a delayed work (aes_battery_work).

In wacom_remove(), aes_battery_work is not canceled. Consequently, if
the device is removed while aes_battery_work is still pending, then hard
crashes or "Oops: general protection fault..." are experienced when
wacom_aes_battery_handler() is finally called. E.g., this happens with
built-in USB devices after resume from hibernate when aes_battery_work
was still pending at the time of hibernation.

So, take care to cancel aes_battery_work in wacom_remove().
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/57a3d82200dbeccd002244b96acad570eeeb731f; https://git.kernel.org/stable/c/a4f182ffa30c52ad1c8e12edfb8049ee748c0f1b; https://git.kernel.org/stable/c/f3054152c12e2eed1e72704aff47b0ea58229584
CVE: CVE-2025-38254
Published: 2025-07-09
Description: In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Add sanity checks for drm_edid_raw()

When EDID is retrieved via drm_edid_raw(), it doesn't guarantee to
return proper EDID bytes the caller wants: it may be either NULL (that
leads to an Oops) or with too long bytes over the fixed size raw_edid
array (that may lead to memory corruption).  The latter was reported
actually when connected with a bad adapter.

Add sanity checks for drm_edid_raw() to address the above corner
cases, and return EDID_BAD_INPUT accordingly.

(cherry picked from commit 648d3f4d209725d51900d6a3ed46b7b600140cdf)
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/4b63507d7cd243574753c6b91f68516d9103f1de; https://git.kernel.org/stable/c/6847b3b6e84ef37451c074e6a8db3fbd250c8dbf
CVE: CVE-2025-38255
Published: 2025-07-09
Description: In the Linux kernel, the following vulnerability has been resolved:

lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()

While testing null_blk with configfs, echo 0 > poll_queues will trigger
following panic:

BUG: kernel NULL pointer dereference, address: [PII_REDACTED]
Oops: Oops: 0000 [#1] SMP NOPTI
CPU: 27 UID: 0 PID: 920 Comm: bash Not tainted 6.15.0-02023-gadbdb95c8696-dirty #1238 PREEMPT(undef)
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014
RIP: 0010:__bitmap_or+0x48/0x70
Call Trace:
 <TASK>
 __group_cpus_evenly+0x822/0x8c0
 group_cpus_evenly+0x2d9/0x490
 blk_mq_map_queues+0x1e/0x110
 null_map_queues+0xc9/0x170 [null_blk]
 blk_mq_update_queue_map+0xdb/0x160
 blk_mq_update_nr_hw_queues+0x22b/0x560
 nullb_update_nr_hw_queues+0x71/0xf0 [null_blk]
 nullb_device_poll_queues_store+0xa4/0x130 [null_blk]
 configfs_write_iter+0x109/0x1d0
 vfs_write+0x26e/0x6f0
 ksys_write+0x79/0x180
 __x64_sys_write+0x1d/0x30
 x64_sys_call+0x45c4/0x45f0
 do_syscall_64+0xa5/0x240
 entry_SYSCALL_64_after_hwframe+0x76/0x7e

Root cause is that numgrps is set to 0, and ZERO_SIZE_PTR is returned from
kcalloc(), and later ZERO_SIZE_PTR will be deferenced.

Fix the problem by checking numgrps first in group_cpus_evenly(), and
return NULL directly if numgrps is zero.

[yukuai3@huawei.com: also fix the non-SMP version]
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/29d39e0d5f16c060e32542b2cf351c09fd22b250; https://git.kernel.org/stable/c/64a99eff8dcf1f951a544e6058341b2b19a8fdbd; https://git.kernel.org/stable/c/911ef2e8a7de5b2bae8ff11fb0bd01f699e6db65
CVE: CVE-2025-38256
Published: 2025-07-09
Description: In the Linux kernel, the following vulnerability has been resolved:

io_uring/rsrc: fix folio unpinning

syzbot complains about an unmapping failure:

[  108.070381][   T14] kernel BUG at mm/gup.c:71!
[  108.070502][   T14] Internal error: Oops - BUG: 00000000f2000800 [#1]  SMP
[  108.123672][   T14] Hardware name: QEMU KVM Virtual Machine, BIOS edk2-20250221-8.fc42 02/21/2025
[  108.127458][   T14] Workqueue: iou_exit io_ring_exit_work
[  108.174205][   T14] Call trace:
[  108.175649][   T14]  sanity_check_pinned_pages+0x7cc/0x7d0 (P)
[  108.178138][   T14]  unpin_user_page+0x80/0x10c
[  108.180189][   T14]  io_release_ubuf+0x84/0xf8
[  108.182196][   T14]  io_free_rsrc_node+0x250/0x57c
[  108.184345][   T14]  io_rsrc_data_free+0x148/0x298
[  108.186493][   T14]  io_sqe_buffers_unregister+0x84/0xa0
[  108.188991][   T14]  io_ring_ctx_free+0x48/0x480
[  108.191057][   T14]  io_ring_exit_work+0x764/0x7d8
[  108.193207][   T14]  process_one_work+0x7e8/0x155c
[  108.195431][   T14]  worker_thread+0x958/0xed8
[  108.197561][   T14]  kthread+0x5fc/0x75c
[  108.199362][   T14]  ret_from_fork+0x10/0x20

We can pin a tail page of a folio, but then io_uring will try to unpin
the head page of the folio. While it should be fine in terms of keeping
the page actually alive, mm folks say it's wrong and triggers a debug
warning. Use unpin_user_folio() instead of unpin_user_page*.

[axboe: adapt to current tree, massage commit message]
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/11e7b7369e655e6131387b174218d7fa9557b3da; https://git.kernel.org/stable/c/53fd75f25b223878b5fff14932e3a22f42b54f77; https://git.kernel.org/stable/c/5afb4bf9fc62d828647647ec[PII_REDACTED]7132e4
CVE: CVE-2025-38257
Published: 2025-07-09
Description: In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Prevent overflow in size calculation for memdup_user()

Number of apqn target list entries contained in 'nr_apqns' variable is
determined by userspace via an ioctl call so the result of the product in
calculation of size passed to memdup_user() may overflow.

In this case the actual size of the allocated area and the value
describing it won't be in sync leading to various types of unpredictable
behaviour later.

Use a proper memdup_array_user() helper which returns an error if an
overflow is detected. Note that it is different from when nr_apqns is
initially zero - that case is considered valid and should be handled in
subsequent pkey_handler implementations.

Found by Linux Verification Center (linuxtesting.org).
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/73483ca7e07a5e39bdf612eec9d3d293e8bef649; https://git.kernel.org/stable/c/7360ee47599af91a1d5f4e74d635d9408a54e489; https://git.kernel.org/stable/c/88f3869649edbc4a13f6c2877091f81cd5a50f05
CVE: CVE-2025-38258
Published: 2025-07-09
Description: In the Linux kernel, the following vulnerability has been resolved:

mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write

memcg_path_store() assigns a newly allocated memory buffer to
filter->memcg_path, without deallocating the previously allocated and
assigned memory buffer.  As a result, users can leak kernel memory by
continuously writing a data to memcg_path DAMOS sysfs file.  Fix the leak
by deallocating the previously set memory buffer.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/490a43d07f1663d827e802720d30cbc0494e4f81; https://git.kernel.org/stable/c/4a158ac0538dd5695eeaa00aa0720d711f3e4ef1; https://git.kernel.org/stable/c/4f489fe6afb395dbc79840efa3c05440b760d883
CVE: CVE-2025-38259
Published: 2025-07-09
Description: In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: wcd9335: Fix missing free of regulator supplies

Driver gets and enables all regulator supplies in probe path
(wcd9335_parse_dt() and wcd9335_power_on_reset()), but does not cleanup
in final error paths and in unbind (missing remove() callback).  This
leads to leaked memory and unbalanced regulator enable count during
probe errors or unbind.

Fix this by converting entire code into devm_regulator_bulk_get_enable()
which also greatly simplifies the code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://git.kernel.org/stable/c/9079db287fc3e38e040b0edeb0a25770bb679c8e; https://git.kernel.org/stable/c/9830ef1803a5bc50b4a984a06cf23142cd46229d; https://git.kernel.org/stable/c/a8795f3cd289cd958f6396a1b43ba46fa8e22a2e
CVE: CVE-2025-38262
Published: 2025-07-09
Description: In the Linux kernel, the following vulnerability has been resolved:

tty: serial: uartlite: register uart driver in init

When two instances of uart devices are probing, a concurrency race can
occur. If one thread calls uart_register_driver function, which first
allocates and assigns memory to 'uart_state' member of uart_driver
structure, the other instance can bypass uart driver registration and
call ulite_assign. This calls uart_add_one_port, which expects the uart
driver to be fully initialized. This leads to a kernel panic due to a
null pointer dereference:

[    8.143581] BUG: kernel NULL pointer dereference, address:[PII_REDACTED]0002b8
[    8.156982] #PF: supervisor write access in kernel mode
[    8.156984] #PF: error_code(0x0002) - not-present page
[    8.156986] PGD 0 P4D 0
...
[    8.180668] RIP: 0010:mutex_lock+0x19/0x30
[    8.188624] Call Trace:
[    8.188629]  ? __die_body.cold+0x1a/0x1f
[    8.195260]  ? page_fault_oops+0x15c/0x290
[    8.209183]  ? __irq_resolve_mapping+0x47/0x80
[    8.209187]  ? exc_page_fault+0x64/0x140
[    8.209190]  ? asm_exc_page_fault+0x22/0x30
[    8.209196]  ? mutex_lock+0x19/0x30
[    8.223116]  uart_add_one_port+0x60/0x440
[    8.223122]  ? proc_tty_register_driver+0x43/0x50
[    8.223126]  ? tty_register_driver+0x1ca/0x1e0
[    8.246250]  ulite_probe+0x357/0x4b0 [uartlite]

To prevent it, move uart driver registration in to init function. This
will ensure that uart_driver is always registered when probe function
is called.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/5015eed450005bab6e5cb6810f7a62eab0434fc4; https://git.kernel.org/stable/c/685d29f2c5057b32c7b1b46f2a7d303b926c8f72; https://git.kernel.org/stable/c/6bd697b5fc39fd24e2aa418c7b7d14469f550a93
CVE: CVE-2025-38264
Published: 2025-07-09
Description: In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: sanitize request list handling

Validate the request in nvme_tcp_handle_r2t() to ensure it's not part of
any list, otherwise a malicious R2T PDU might inject a loop in request
list processing.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/0bf04c874fcb1ae46a863034296e4b33d8fbd66c; https://git.kernel.org/stable/c/78a4adcd3fedb0728436e8094848ebf4c6bae006; https://git.kernel.org/stable/c/f054ea[PII_REDACTED]4a6ca7b3b387a027308f8b13
CVE: CVE-2025-6514
Published: 2025-07-09
Description: mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-78
References: https://github.com/geelen/mcp-remote/commit/607b226a356cb61a239ffaba2fb3db1c9dea4bac; https://jfrog.com/blog/2025-6514-critical-mcp-remote-rce-vulnerability; https://research.jfrog.com/vulnerabilities/mcp-remote-command-injection-rce-jfsa-2[PII_REDACTED]44/
CVE: CVE-2025-1112
Published: 2025-07-09
Description: IBM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only be available to privileged users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-282
References: https://www.ibm.com/support/pages/node/7239151
CVE: CVE-2025-2670
Published: 2025-07-09
Description: IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points related to workflow feature of OpenPages. An authenticated user is able to obtain certain information about Workflow related configuration and internal state.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-497
References: https://www.ibm.com/support/pages/node/7239153
CVE: CVE-2025-52364
Published: 2025-07-09
Description: Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the initialization script /etc/init.d/eth.sh. This allows remote attackers to connect to the device s shell over the network, potentially without authentication if default or weak credentials are present
CVSS Score: 7.5 (HIGH)
CWE: CWE-1391
References: https://cybermaya.in/posts/Post-40/; https://www.tendacn.com/product/download/cp3pro.html
CVE: CVE-2025-53546
Published: 2025-07-09
Description: Folo organizes feeds content into one timeline. Using pull_request_target on .github/workflows/auto-fix-lint-format-commit.yml can be exploited by attackers, since untrusted code can be executed having full access to secrets (from the base repo). By exploiting the vulnerability is possible to exfiltrate GITHUB_TOKEN which has high privileges. GITHUB_TOKEN can be used to completely overtake the repo since the token has content write privileges. This vulnerability is fixed in commit 585c6a591440cd39f92374230ac5d65d7dd23d6a.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-829
References: https://github.com/RSSNext/Folo/commit/585c6a591440cd39f92374230ac5d65d7dd23d6a; https://github.com/RSSNext/Folo/security/advisories/GHSA-h87r-5w74-qfm4; https://github.com/RSSNext/Folo/security/advisories/GHSA-h87r-5w74-qfm4
CVE: CVE-2025-7204
Published: 2025-07-09
Description: In ConnectWise PSA versions older than 2025.9, a
vulnerability exists where authenticated users could gain access to sensitive
user information. Specific API requests were found to return an overly verbose
user object, which included encrypted password hashes for other users.
Authenticated users could then retrieve these hashes. 



An
attacker or privileged user could then use these exposed hashes to conduct
offline brute-force or dictionary attacks. Such attacks could lead to
credential compromise, allowing unauthorized access to accounts, and
potentially privilege escalation within the system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-201
References: https://www.connectwise.com/company/trust/security-bulletins/connectwise-psa-2025.9-security-fix; https://www.themissinglink.com.au/security-advisories/cve-2025-7204
CVE: CVE-2025-44177
Published: 2025-07-09
Description: A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endpoint. An unauthenticated attacker can remotely read arbitrary files on the underlying OS using encoded traversal sequences.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22
References: https://gist.github.com/stSLAYER/4a2ecfbab1215a0be0dde59c4ac0122d; https://protop.com
CVE: CVE-2025-44526
Published: 2025-07-09
Description: Realtek RTL8762EKF-EVB RTL8762E SDK V1.4.0 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low Energy (BLE) data packets. This issue allows attackers to cause a Denial of Service (DoS) via a crafted LL_Length_Req packet.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-284
References: http://realtek.com; http://rtl8762ekf-evb.com; https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/Realtek/Improper_Validation_of_BLE_PDU_Length.md
CVE: CVE-2025-49604
Published: 2025-07-09
Description: For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1.9 and ameba-rtos-d before commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a on 2025/07/03. In the WLAN driver defragment function, lack of validation of the size of fragmented Wi-Fi frames may lead to a heap-based buffer overflow.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-122
References: https://github.com/Ameba-AIoT/ameba-arduino-d/pull/281; https://github.com/Ameba-AIoT/ameba-arduino-d/releases/tag/V3.1.9; https://www.amebaiot.com/en/security-bulletin-cve-2025-49604/
CVE: CVE-2025-53650
Published: 2025-07-09
Description: Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present in exception error messages that are written to the build log.
CVSS Score: 7.3 (HIGH)
CWE: CWE-522
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3499; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53651
Published: 2025-07-09
Description: Jenkins HTML Publisher Plugin 425 and earlier displays log messages that include the absolute paths of files archived during the Publish HTML reports post-build step, exposing information about the Jenkins controller file system in the build log.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-36
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3547; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53652
Published: 2025-07-09
Description: Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches one of the offered choices, allowing attackers with Item/Build permission to inject arbitrary values into Git parameters.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3419; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53653
Published: 2025-07-09
Description: Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-311
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3542; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53654
Published: 2025-07-09
Description: Jenkins Statistics Gatherer Plugin 2.0.3 and earlier stores the AWS Secret Key unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3554; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53655
Published: 2025-07-09
Description: Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration form, increasing the potential for attackers to observe and capture it.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-256
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3554; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53656
Published: 2025-07-09
Description: Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier stores SLM License Access Keys, client secrets, and passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-256
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3556; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53657
Published: 2025-07-09
Description: Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and passwords displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3556; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53658
Published: 2025-07-09
Description: Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not escape the Applitools URL on the build page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3509; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53659
Published: 2025-07-09
Description: Jenkins QMetry Test Management Plugin 1.13 and earlier stores Qmetry Automation API Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3532; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53660
Published: 2025-07-09
Description: Jenkins QMetry Test Management Plugin 1.13 and earlier does not mask Qmetry Automation API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-256, CWE-522
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3532; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53661
Published: 2025-07-09
Description: Jenkins Testsigma Test Plan run Plugin 1.6 and earlier does not mask Testsigma API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-522
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3515; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53662
Published: 2025-07-09
Description: Jenkins IFTTT Build Notifier Plugin 1.2 and earlier stores IFTTT Maker Channel Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-256
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3541; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53663
Published: 2025-07-09
Description: Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3552; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53664
Published: 2025-07-09
Description: Jenkins Apica Loadtest Plugin 1.10 and earlier stores Apica Loadtest LTP authentication tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-256
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3540; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53665
Published: 2025-07-09
Description: Jenkins Apica Loadtest Plugin 1.10 and earlier does not mask Apica Loadtest LTP authentication tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-256
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3540; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53666
Published: 2025-07-09
Description: Jenkins Dead Man's Snitch Plugin 0.1 stores Dead Man's Snitch tokens unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-311
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3524; http://www.openwall.com/lists/oss-security/2025/07/09/4
CVE: CVE-2025-53667
Published: 2025-07-09
Description: Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-522
References: https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3524; http://www.openwall.com/lists/oss-security/2025/07/09/4