CVE-2022-46685: Medium severity gitea vulnerability
Published Dec 7, 2022
·Updated
In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.
Affected Software
1 affected component
Gitea Gitea Jenkins<1.4.5
Event History
Dec 7, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Dec 12, 2022
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this Jenkins Gitea Plugin vulnerability?
The vulnerability ID is CVE-2022-46685.
2
What is the severity of CVE-2022-46685?
The severity of CVE-2022-46685 is medium with a CVSS score of 4.3.
3
What is the affected software in this vulnerability?
The affected software is Gitea Gitea version up to but excluding 1.4.5.
4
What is the impact of this vulnerability?
The vulnerability potentially exposes Gitea personal access tokens through the build log.
5
Is there a fix available for CVE-2022-46685?
Yes, upgrading to Jenkins Gitea Plugin version 1.4.5 or later fixes the vulnerability.