Description
In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potentially exposing them through the build log.
Remediation
References
https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2661
Related Vulnerabilities
CVE-2023-24446 Vulnerability in maven package org.jenkins-ci.plugins:openid
CVE-2020-1926 Vulnerability in maven package org.apache.hive:hive-service
CVE-2022-36892 Vulnerability in maven package org.jenkins-ci.plugins:rhnpush-plugin
CVE-2023-34454 Vulnerability in maven package org.xerial.snappy:snappy-java
CVE-2023-24440 Vulnerability in maven package org.jenkins-ci.plugins:jira-steps