What is CVE-2025-53657?

CVE-2025-53657 is a medium-severity vulnerability in Jenkins Readyapi_functional_testing, classified under Insufficiently Protected Credentials. CVSS score: 4.3/10. Published 2025-07-09.

How severe is CVE-2025-53657?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Jenkins Readyapi_functional_testing

CVE-2025-53657

Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier does not mask SLM License Access Keys, client secrets, and passwords displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

EPSS: 0.002 (13.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Jenkins Readyapi_functional_testing
Jenkins Project Readyapi Functional Testing Plugin — versions 0

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

jenkinsci-cert@googlegroups.com (vendor-advisory, Vendor Advisory)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2025-53657?: CVE-2025-53657 is a medium-severity vulnerability in Jenkins Readyapi_functional_testing, classified under Insufficiently Protected Credentials. CVSS score: 4.3/10. Published 2025-07-09.
How severe is CVE-2025-53657?: Medium severity. CVSS v3 base score is 4.3 out of 10.