Jenkins Xooa Plugin (Jenkins Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-07-09. Vendor: Jenkins Project.

CVEs of Jenkins Xooa Plugin

• CVE-2025-53677 - CVSS 5.3 (medium), 2025-07-09: Jenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form, increasing the potential for attackers to…
• CVE-2025-53676 - CVSS 6.5 (medium), 2025-07-09: Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controller, where it can be…