CVE-2025-30197

Name of the Vulnerable Software and Affected Versions Jenkins Zoho QEngine Plugin versions 1.0.29.vfa cc23396502 and earlier

Description The issue concerns the Jenkins Zoho QEngine Plugin, where the QEngine API Key form field is not masked, potentially allowing attackers to observe and capture it.

Recommendations For Jenkins Zoho QEngine Plugin versions 1.0.29.vfa cc23396502 and earlier, consider masking the QEngine API Key form field to prevent potential attackers from observing and capturing it. At the moment, there is no information about a newer version that contains a fix for this vulnerability.