CVE-2025-64147

creationtimestamp| type| source ---|---|--- 2025-10-29 13:51:56+00:00| seen| Telegram/nk-ow7qlv--lyz7ZGV6yD6qQvKmfQv5LIQNOk5hzpz68r3w...

CVE-2025-64147

The Jenkins Curseforge Publisher Plugin (version 1.0 and earlier) is vulnerable to sensitive information exposure due to improper handling of API keys. The plugin stores these keys unencrypted within the job config.xml files on the Jenkins controller and fails to mask them on the job configuratio...

CVE-2025-64147

Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them...