Vulnerability Details CVE-2025-64147
Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 1.4%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2025-64147
-
cpe:2.3:a:jenkins:curseforge_publisher:1.0