Threats tagged 'ghsa-hv42-crpx-q355'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2025-64147Org.jenkins ci.plugins:curseforge publisher: Jenkins Curseforge Publisher Plugin does not mask API Keys displayed on Medium4.3EPSS 0.3%2025-10-29GCVE DatabaseCVE-2025-64147 The Jenkins Curseforge Publisher Plugin version 1.0 and earlier stores API keys unencrypted in job configuration files on the Jenkins controller. These keys are visible to users with Item/Extended Read permission or those with file system access to the Jenkins controller. Additionally, the plugin's job configuration form does not mask the API keys, increasing the risk of accidental exposure. No fix is currently available for this vulnerability. EPSS 0.3%Report on CVE-2025-64147 Vulnerability CWE-311 #ghsa-hv42-crpx-q355 #maven	GCVE Database	2025-10-29

Page 1 of 1