Jenkins Statistics Gatherer Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-07-09. Vendor: Jenkins Project.

CVEs of Jenkins Statistics Gatherer Plugin

• CVE-2025-53655 - CVSS 5.3 (medium), 2025-07-09: Jenkins Statistics Gatherer Plugin 2.0.3 and earlier does not mask the AWS Secret Key on the global configuration form, increasing the potential for attackers…
• CVE-2025-53654 - CVSS 6.5 (medium), 2025-07-09: Jenkins Statistics Gatherer Plugin 2.0.3 and earlier stores the AWS Secret Key unencrypted in its global configuration file on the Jenkins controller, where…