CVE-2025-53743

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-522

Affected software

Vendor	Product	Versions
Jenkins Project	Jenkins Applitools Eyes Plugin	<= 1.16.5

References

Timeline

Published: Jul 9, 2025
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-537447.2An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 a CVE-2025-53758.8A vulnerability was found in PHPGurukul HPGurukul Online Birth Certificate System 2.0. It has been classified as critical. Affected is an un CVE-2025-537545.1This vulnerability exists in Digisol DG-GR6821AC Router due to hard-coded Root Access Credentials in system configuration of the device firm CVE-2025-537555.1This vulnerability exists in Digisol DG-GR6821AC Router due to storage of credentials and PINS without encryption in the device firmware. An CVE-2025-537568.7This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface. A remo CVE-2025-537578.7This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associa CVE-2025-537585.1This vulnerability exists in Digisol DG-GR6821AC Router due to use of default admin credentials at its web management interface. An attacker CVE-2025-537597.8Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-53769.8A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as critical. Affected b CVE-2025-537607.1Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2025-537617.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.CVE-2025-537629.9Permissive list of allowed inputs in Microsoft Purview allows an authorized attacker to elevate privileges over a network.