Description
In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jenkins Project | Jenkins Gitea Plugin | unspecified – ≤ 1.4.4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jenkins-ci.plugins:gitea | < 1.4.5 | 1.4.5 | GHSA-x3qh-53qf-jxq9 |
Advisories 1
- WID-SEC-2022-2262 Jenkins: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 7, 2022