Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2025-53667

Jenkins Dead Man's Snitch Plugin 0.1 does not mask Dead Man's Snitch tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

VectorNETWORK

PublishedJul 09, 2025, 16:15

Published Byjenkinsci-cert@googlegroups.com

Base Score

Score5.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.jenkins-ci.plugins:deadmanssnitch(Maven)0N/AN/A

References

https://www.jenkins.io/security/advisory/2025-07-09/#SECURITY-3524
http://www.openwall.com/lists/oss-security/2025/07/09/4

Weakness Type

CWE-522

CVSS Metrics

Base Score

5.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK