What is CVE-2025-53661?

CVE-2025-53661 is a medium-severity vulnerability in Jenkins Testsigma_test_plan_run, classified under Insufficiently Protected Credentials. CVSS score: 4.3/10. Published 2025-07-09.

How severe is CVE-2025-53661?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Jenkins Testsigma_test_plan_run

CVE-2025-53661

Jenkins Testsigma Test Plan run Plugin 1.6 and earlier does not mask Testsigma API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

EPSS: 0.002 (12.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Jenkins Testsigma_test_plan_run
Jenkins Project Testsigma Test Plan Run Plugin — versions 0

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

jenkinsci-cert@googlegroups.com (vendor-advisory, Vendor Advisory)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2025-53661?: CVE-2025-53661 is a medium-severity vulnerability in Jenkins Testsigma_test_plan_run, classified under Insufficiently Protected Credentials. CVSS score: 4.3/10. Published 2025-07-09.
How severe is CVE-2025-53661?: Medium severity. CVSS v3 base score is 4.3 out of 10.