Moderate severityNVD Advisory· Published Dec 7, 2022· Updated Apr 23, 2025

CVE-2022-46685

Description

In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jenkins-ci.plugins:giteaMaven	< 1.4.5	1.4.5

Affected products

osv-coords2 versions
pkg:bitnami/gitea pkg:maven/org.jenkins-ci.plugins/gitea
< 1.4.5+ 1 more
- (no CPE)range: < 1.4.5
- (no CPE)range: < 1.4.5
Jenkins Project/Gitlab Hook Plugincpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-x3qh-53qf-jxq9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-46685ghsaADVISORY
github.com/jenkinsci/gitea-plugin/commit/b3b2bd869b91f9f1312bbbbf6128cad2cd86bd8cghsaWEB
www.jenkins.io/security/advisory/2022-12-07/ghsaWEB

News mentions

Jenkins Security Advisory 2022-12-07
Jenkins Security Advisories · Dec 7, 2022

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000