CVE-2025-0148

—

CVSS 3.1

2.6 low

EPSS

<1%p7

Published

Feb 3, 2025 (Feb 3, 2025)

Modified

Jun 17, 2026

Description

Missing password field masking in the Zoom Jenkins Marketplace plugin before version 1.6 may allow an unauthenticated user to conduct a disclosure of information via adjacent network access.

Weakness: CWE-549
Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.