CVE-2025-31728

The Jenkins AsakusaSatellite Plugin (version 0.1.1 and earlier) fails to mask AsakusaSatellite API keys on the job configuration form. Additionally, the plugin stores these API keys in unencrypted form within the job config.xml files on the Jenkins controller. An attacker with Item/Extended Read ...