Threats tagged 'ghsa-23vj-j6jc-w892'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2025-64146Org.jenkins ci.plugins:curseforge publisher: Jenkins Curseforge Publisher Plugin stores API Keys unencrypted in job Medium4.3EPSS 0.2%2025-10-29GCVE DatabaseCVE-2025-64146 The Jenkins Curseforge Publisher Plugin version 1.0 and earlier stores API keys unencrypted in job configuration files on the Jenkins controller. These keys are accessible to users with Item/Extended Read permissions or those with file system access to the Jenkins controller. The job configuration form also does not mask these keys, increasing the risk of exposure. No fix is currently available for this vulnerability. EPSS 0.2%Report on CVE-2025-64146 Vulnerability CWE-311 #ghsa-23vj-j6jc-w892 #maven	GCVE Database	2025-10-29

Page 1 of 1