{"action":"Upgrade org.jenkins-ci.plugins:gitea to 1.4.5 or later.","affected":[{"fixed":"1.4.5","introduced":"0"}],"component":"org.jenkins-ci.plugins:gitea","cve_ids":["CVE-2022-46685"],"ecosystem":"Maven","epss":0.00379,"exploited":false,"fixed_versions":["1.4.5"],"ghsa_id":"GHSA-x3qh-53qf-jxq9","id":"tcs_01M5N9HN5558WRWY43YZZ5NZ05","modified_at":"2023-12-06T01:02:43.491591Z","published_at":"2022-12-12T09:30:35Z","references":["https://osv.dev/vulnerability/GHSA-x3qh-53qf-jxq9","https://nvd.nist.gov/vuln/detail/CVE-2022-46685","https://github.com/jenkinsci/gitea-plugin/commit/b3b2bd869b91f9f1312bbbbf6128cad2cd86bd8c","https://github.com/jenkinsci/gitea-plugin","https://www.jenkins.io/security/advisory/2022-12-07/#SECURITY-2661"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-x3qh-53qf-jxq9","url":"https://osv.dev/vulnerability/GHSA-x3qh-53qf-jxq9"}],"summary":"Jenkins Gitea Plugin vulnerable to Cleartext Transmission of Sensitive Information"}