1. Home
  2. CVE Database
  3. CVE-2022-46685
MEDIUM · 4.3

CVE-2022-46685

In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.

Vulnerability Description

In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
GiteaGitea< 1.4.5

Related Weaknesses (CWE)

CWE-319

References

FAQ

What is CVE-2022-46685?

CVE-2022-46685 is a vulnerability with a CVSS score of 4.3 (MEDIUM). In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.

How severe is CVE-2022-46685?

CVE-2022-46685 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-46685?

Check the references section above for vendor advisories and patch information. Affected products include: Gitea Gitea.