Description
In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.
Published: 2022-12-07
Score: 4.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2022-7767 In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.
Github GHSA Github GHSA GHSA-x3qh-53qf-jxq9 Jenkins Gitea Plugin vulnerable to Cleartext Transmission of Sensitive Information
History

Wed, 23 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Gitea Gitea
cve-icon MITRE

Status: PUBLISHED

Assigner: jenkins

Published:

Updated: 2025-04-23T14:13:22.512Z

Reserved: 2022-12-06T00:00:00.000Z

Link: CVE-2022-46685

cve-icon Vulnrichment

Updated: 2024-08-03T14:39:38.558Z

cve-icon NVD

Status : Modified

Published: 2022-12-12T09:15:13.083

Modified: 2025-04-23T15:15:58.573

Link: CVE-2022-46685

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses