CVE Watchtower ← Back to CVE ListCVE-2025-64147NVDVulnerability SummaryJenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.Severity LevelUNKNOWNPublished DateOct 29, 2025Last ModifiedOct 29, 2025Exploitation StatusNo confirmed exploitation yetEPSS Score (30-Day)Data PendingRoot Weakness (CWE)N/AExternal Referenceshttps://www.jenkins.io/security/advisory/2025-10-29/#SECURITY-3562