CVE-2025-64147_CVE-2025-64147

4.3 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Basic Information

ID CVE-2025-64147

Source jenkins

Published Oct 29, 2025 at 13:29

Modified Oct 29, 2025 at 14:12

Affected Product

Vendor Jenkins Project

Product Jenkins Curseforge Publisher Plugin

Affected Versions Jenkins Project Jenkins Curseforge Publisher Plugin 0

CWE Classification

CWE-311

References

www.jenkins.io /security/advisory/2025-10-29/

{
    "lastseen": "",
    "description": "Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.",
    "published": "2025-10-29T13:29:50.359Z",
    "modified": "2025-10-29T14:12:18.241Z",
    "type": "cve",
    "title": "CVE-2025-64147",
    "source": "jenkins",
    "references": "https://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3562",
    "id": "CVE-2025-64147",
    "bulletinFamily": "",
    "cwe": [
        "CWE-311"
    ],
    "cvelist": null,
    "sourceData": "Jenkins Project Jenkins Curseforge Publisher Plugin 0",
    "sourceHref": "",
    "cvss": {
        "score": 4.3,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Jenkins Curseforge Publisher Plugin",
    "version": "0",
    "vendor": "Jenkins Project",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}