1. Home
  2. CVE Database
  3. CVE-2025-53651
MEDIUM · 6.3

CVE-2025-53651

Jenkins HTML Publisher Plugin 425 and earlier displays log messages that include the absolute paths of files archived during the Publish HTML reports post-build step, exposing information about the Je...

Vulnerability Description

Jenkins HTML Publisher Plugin 425 and earlier displays log messages that include the absolute paths of files archived during the Publish HTML reports post-build step, exposing information about the Jenkins controller file system in the build log.

CVSS Score

6.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
JenkinsHtml Publisher< 427

Related Weaknesses (CWE)

CWE-36

References

FAQ

What is CVE-2025-53651?

CVE-2025-53651 is a vulnerability with a CVSS score of 6.3 (MEDIUM). Jenkins HTML Publisher Plugin 425 and earlier displays log messages that include the absolute paths of files archived during the Publish HTML reports post-build step, exposing information about the Je...

How severe is CVE-2025-53651?

CVE-2025-53651 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-53651?

Check the references section above for vendor advisories and patch information. Affected products include: Jenkins Html Publisher.