Executive brief
Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages
Affected products
- Maven org.jenkins-ci.plugins:credentials-binding
Junglewise Threat Intelligence
CVE-2025-53650: Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages
CVE-2025-53650 · Severity: low · CVSS 3.1 · Published 2025-07-09
Technologies: org.jenkins-ci.plugins:credentials-binding (Maven). Vendors: Maven.
Related threats
- Jenkins Credentials Binding Plugin path traversal in file credentials
- Jenkins Credentials Binding Plugin has a path traversal vulnerability
- Improper masking of some secrets in Jenkins Credentials Binding Plugin
- Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps
- Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format