CVSS 3.1
3.1 lowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:NCVE-2025-30197
Low (3.1) in jenkins zoho qengine. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in io.jenkins.plugins:zohoqengine 1.0.31.v4a_b_1db_6d6a_f2.
Jenkins Zoho QEngine Plugin 1.0.29.vfa_cc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
- CWE
- CWE-549
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:zoho_qengine
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2x3g-rr4w-4qrp | Maven | io.jenkins.plugins:zohoqengine | <1.0.31.v4a_b_1db_6d6a_f2 | 1.0.31.v4a_b_1db_6d6a_f2 |