Vulnerabilidades do Jenkins Project Jenkins Curseforge Publisher Plugin
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Jenkins Project Jenkins Curseforge Publisher Plugin: 2 registro(s), com versões afetadas e correções.
CVE-2025-64147
Média · 4.3
CWE-311 29/10/2025
Missing Encryption of Sensitive Data em Jenkins Curseforge Publisher
Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
CVE-2025-64146
Média · 4.3
CWE-311 29/10/2025
Missing Encryption of Sensitive Data em Jenkins Curseforge Publisher
Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to the Jenkins controller file system.