CVE-2025-68931

CVE-2025-68931 is a high-severity vulnerability (CVSS 7.5) affecting the Jervis library, used in Jenkins Job DSL plugin scripts and shared pipeline libraries prior to version 2.2. The vulnerability stems from a lack of authentication in its AES/CBC/PKCS5Padding implementation, making it susceptible to padding oracle attacks and ciphertext manipulation. An unauthenticated attacker can exploit this with low complexity to achieve high integrity impact, though confidentiality and availability are not affected. While there is no known active exploitation, public exploit code, or inclusion in the KEV catalog, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.