CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCVE-2025-53674
Medium (5.3) in jenkins sensedia api platform tools. EPSS 0.3% chance of exploitation in the next 30 days.
Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture it.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
- CWE
- CWE-256
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jenkins:sensedia_api_platform_tools
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-vx57-hphr-3mr9 | Maven | org.jenkins-ci.plugins:sensedia-api-platform | <=1.0 | no fix published |