Junglewise Threat Intelligence

CVE-2025-53743: Jenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration form

CVE-2025-53743 · Severity: low · CVSS 3.1 · Published 2025-07-09

Technologies: org.jenkins-ci.plugins:applitools-eyes (Maven). Vendors: Maven.

Executive brief

Jenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration form

Affected products

Maven org.jenkins-ci.plugins:applitools-eyes

Related threats

Jenkins Applitools Eyes Plugin vulnerability exposes unencrypted keys to certain authenticated users
Jenkins Applitools Eyes Plugin vulnerable to XSS through its Build page