Description
In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.
Remediation
References
https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2661
Related Vulnerabilities
CVE-2021-21655 Vulnerability in maven package org.jenkins-ci.plugins:p4
CVE-2019-10451 Vulnerability in maven package com.soasta.jenkins:cloudtest
CVE-2019-10335 Vulnerability in maven package org.jenkins-ci.plugins:electricflow
CVE-2023-49374 Vulnerability in maven package com.jfinal:jfinal
CVE-2016-2175 Vulnerability in maven package org.apache.pdfbox:preflight-app