CVE-2025-53666 · Brief

CVEs like CVE-2025-53666

The records whose text reads closest to CVE-2025-53666, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-534420.805
   Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before…

   Same weakness class, CWE-311; same vendor or product family, Jenkins.

2. CVE-2026-846760.842
   Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the…

   Same weakness class, CWE-311; same vendor or product family, Jenkins.

3. CVE-2025-536780.813
   Jenkins User1st uTester Plugin 1.1 and earlier stores the uTester JWT token unencrypted in its global configuration…

   Same weakness class, CWE-311; same vendor or product family, Jenkins.

4. CVE-2019-10030610.821
   Jenkins jenkins-cloudformation-plugin Plugin stores credentials unencrypted in job config.xml files on the Jenkins…

   Same weakness class, CWE-311; same vendor or product family, Jenkins.

5. CVE-2025-641430.818
   Jenkins OpenShift Pipeline Plugin 1.0.57 and earlier stores authorization tokens unencrypted in job config.xml files on…

   Same weakness class, CWE-311; same vendor or product family, Jenkins.

6. CVE-2019-10030730.811
   Jenkins VS Team Services Continuous Deployment Plugin stores credentials unencrypted in job config.xml files on the…

   Same weakness class, CWE-311; same vendor or product family, Jenkins.

7. CVE-2019-10030890.815
   Jenkins Upload to pgyer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they…

   Same weakness class, CWE-311; same vendor or product family, Jenkins.

8. CVE-2025-536530.826
   Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml…

   Same weakness class, CWE-311; same vendor or product family, Jenkins.

9. CVE-2025-641460.809
   Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller…

   Same weakness class, CWE-311; same vendor or product family, Jenkins.

10. CVE-2025-536680.810
    Jenkins VAddy Plugin 1.2.8 and earlier stores Vaddy API Auth Keys unencrypted in job config.xml files on the Jenkins…

    Same weakness class, CWE-311; same vendor or product family, Jenkins.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.