low2.6
CVE-2025-0148
Jenkins Zoom Plugin is Missing Password Field Masking
Impact
Missing password field masking in the Zoom Jenkins Marketplace plugin before version 1.6 may allow an unauthenticated user to conduct a disclosure of information via adjacent network access.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | io.jenkins.plugins:zoom | < 1.6 | 1.6 |