Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-31728

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Published

2025-04-02T15:16:00.383

Last Modified

2025-04-17T14:35:36.063

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-549
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application jenkins asakusasatellite ≤ 0.1.1 Yes
References