CVE-2025-53674: Jenkins Sensedia API Platform Plugin Vulnerability Exposes Unencrypted Tokens
Summary
CVE-2025-53674: Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens. Affects org.jenkins-ci.plugins:sensedia-api-platform versions < 1.0. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Jenkins Sensedia API Platform Plugin is designed to facilitate integration with the Sensedia API Manager, allowing users to manage API interactions within Jenkins. This plugin enhances the capabilities of Jenkins by enabling seamless API management, but it has a critical vulnerability that compromises the security of sensitive tokens used for API integration.
Vulnerability Detail
The vulnerability in the Jenkins Sensedia API Platform Plugin arises from the failure to mask the Sensedia API Manager integration token on the global configuration form. This oversight allows potential attackers to observe and capture the integration token, which could lead to unauthorized access to the API Manager and sensitive data. The vulnerability is classified under CWE-256, indicating improper handling of sensitive information.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, ensure that access to the Jenkins configuration is restricted to trusted users only, minimizing the risk of exposure to unauthorized individuals. Additionally, consider using environment variables to store sensitive tokens instead of hardcoding them in the configuration.
Conclusion
The Jenkins Sensedia API Platform Plugin vulnerability (CVE-2025-53674) poses a significant risk by exposing sensitive integration tokens. Users are advised to update to the latest version to mitigate this risk and ensure the security of their API interactions.
See every vulnerability recorded for org.jenkins-ci.plugins:sensedia-api-platform →
FAQ
The vulnerability allows the Sensedia API Manager integration token to be visible in the global configuration form, posing a risk of unauthorized access.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 4.3, indicating a moderate severity level.
Yes, a patch is available in version 1.1 of the Jenkins Sensedia API Platform Plugin.
If immediate updates are not possible, restrict access to the Jenkins configuration and consider using environment variables for sensitive tokens.
Related vulnerabilities
Recent vulnerabilities recorded for org.jenkins-ci.plugins:sensedia-api-platform.
