CVE-2022-46685

—

CVSS 3.1

4.3 medium

EPSS

<1%p26

Published

Dec 12, 2022 (Dec 12, 2022)

Modified

Jun 17, 2026

Description

In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.

Vendors: gitea
Products: gitea
Weakness: CWE-319
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.