CVE-2025-31727
1 advisory.
Maven/org.codefirst.jenkins.asakusasatellite:asakusa-satellite-plugin CVE-2025-31727: medium 4.3
Jenkins AsakusaSatellite Plugin Stores API Keys Unencrypted in Job `config.xml` Files
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.1.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-fv9q-fq62-c6qg
- https://nvd.nist.gov/vuln/detail/CVE-2025-31727
- https://github.com/jenkinsci/asakusa-satellite-plugin
- https://www.jenkins.io/security/advisory/2025-04-02/#SECURITY-3523
CVE-2025-31727 · published · modified · JSON