CVE-2020-5262

PoC —

CVSS 3.1

5.5 medium

EPSS

<1%p44

Published

Mar 19, 2020 (Mar 19, 2020)

Modified

Jun 17, 2026

Description

In EasyBuild before version 4.1.2, the GitHub Personal Access Token (PAT) used by EasyBuild for the GitHub integration features (like `--new-pr`, `--fro,-pr`, etc.) is shown in plain text in EasyBuild debug log files. This issue is fixed in EasyBuild v4.1.2, and in the `master`+ `develop` branches of the `easybuild-framework` repository.

Vendors: easybuild project
Products: easybuild
Weakness: CWE-532, CWE-922
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.