Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Jenkins Curseforge Publisher Plugin — Jenkins Security Advisory 2025-10-29 Clear all filters
TI-2025-39597 CVE-2025-64146 · GHSA-23vj-j6jc-w892

Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml…

Priority LOW 19

Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins control…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00173 Published 2025-10-29 No fix listed CWE-311