CVE-2025-64147

creationtimestamp| type| source ---|---|--- 2025-10-29 13:51:56+00:00| seen| Telegram/nk-ow7qlv--lyz7ZGV6yD6qQvKmfQv5LIQNOk5hzpz68r3w...

CVE-2025-64147

The Jenkins Curseforge Publisher Plugin version 1.0 and earlier contains a security vulnerability where API Keys are not masked on the job configuration form. This exposure allows attackers to observe and capture sensitive keys. Additionally, the plugin stores these API Keys unencrypted in the co...