Medium severity4.3NVD Advisory· Published Dec 12, 2022· Updated Jun 17, 2026

CVE-2022-46685

Description

In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:giteaMaven	< 1.4.5	1.4.5

Affected products

ghsa-coords2 versions
pkg:maven/org.jenkins-ci.plugins/gitea pkg:bitnami/gitea
< 1.4.5+ 1 more
- (no CPE)range: < 1.4.5
- (no CPE)range: < 1.4.5
Go Gitea/Gitea
cpe:2.3:a:gitea:gitea:*:*:*:*:*:jenkins:*:*
Range: <1.4.5
Jenkins Project/Gitlab Hook Plugincpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-x3qh-53qf-jxq9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-46685ghsaADVISORY
www.jenkins.io/security/advisory/2022-12-07/nvdVendor AdvisoryWEB
github.com/jenkinsci/gitea-plugin/commit/b3b2bd869b91f9f1312bbbbf6128cad2cd86bd8cghsaWEB

News mentions

Jenkins Security Advisory 2022-12-07
Jenkins Security Advisories · Dec 7, 2022

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000