HomeDefault status
unknown
Any version
affected
Description
Jenkins Xooa Plugin 0.0.7 and earlier does not mask the Xooa Deployment Token on the global configuration form, increasing the potential for attackers to observe and capture it.
Product status
Any version
References
www.openwall.com/lists/oss-security/2025/07/09/4
www.jenkins.io/security/advisory/2025-07-09/ (Jenkins Security Advisory 2025-07-09)