4.3

CVE-2025-64147

Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Jenkins ≫ Curseforge Publisher Version 1.0 SwPlatform jenkins
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.156
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-311 Missing Encryption of Sensitive Data

The product does not encrypt sensitive or critical information before storage or transmission.

https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3562
Vendor Advisory
http://www.openwall.com/lists/oss-security/2025/10/29/2