CVE-2025-64147

creationtimestamp| type| source ---|---|--- 2025-10-29 13:51:56+00:00| seen| Telegram/nk-ow7qlv--lyz7ZGV6yD6qQvKmfQv5LIQNOk5hzpz68r3w...

CVE-2025-64147

The Jenkins Curseforge Publisher Plugin (version 1.0 and earlier) is vulnerable to sensitive information exposure due to improper handling of API keys. The plugin stores these keys unencrypted within the job config.xml files on the Jenkins controller and fails to mask them on the job configuratio...