Miggo Logo
Miggo Vulnerability Database
→
CVE-2025-53654

CVE-2025-53654: Jenkins Statistics Gatherer Plugin vulnerability exposes AWS Secret Key

4.3

CVSS Score
3.1

Basic Information

CVE ID
CVE-2025-53654
GHSA ID
GHSA-3c9f-c64m-h4wc
EPSS Score
0.1251%
CWE
CWE-522
Published
7/9/2025
Updated
7/9/2025
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
org.jenkins.plugins.statistics.gatherer:statistics-gatherermaven<= 2.0.3

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

J*nkins St*tisti*s **t**r*r Plu*in *.*.* *n* **rli*r stor*s t** *WS S**r*t K*y un*n*rypt** in its *lo**l *on*i*ur*tion *il* `or*.j*nkins.plu*ins.st*tisti*s.**t**r*r.St*tisti*s*on*i*ur*tion.xml` on t** J*nkins *ontroll*r *s p*rt o* its *on*i*ur*tion.

Reasoning

No *n*lysis *v*il**l*