CVE-2020-5262

In EasyBuild before version 4.1.2, the GitHub Personal Access Token (PAT) used by EasyBuild for the GitHub integration features (like `--new-pr`, `--fro,-pr`, etc.) is shown in plain text in EasyBuild debug log files. This issue is fixed in EasyBuild v4.1.2, and in the `master`+ `develop` branches of the `easybuild-framework` repository.

• CWE-532
• CWE-922

• https://github.com/easybuilders/easybuild-framework/pull/3248Exploit, Third Party Advisory
• https://github.com/easybuilders/easybuild-framework/pull/3249Patch, Third Party Advisory
• https://github.com/easybuilders/easybuild-framework/security/advisories/GHSA-2wx6-wc87-rmjmThird Party Advisory
• https://github.com/easybuilders/easybuild-framework/pull/3248Exploit, Third Party Advisory
• https://github.com/easybuilders/easybuild-framework/pull/3249Patch, Third Party Advisory
• https://github.com/easybuilders/easybuild-framework/security/advisories/GHSA-2wx6-wc87-rmjmThird Party Advisory

Published

Mar 19, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5256BookStack before version 0.25.5 has a vulnerability where a …8.8
• CVE-2020-5257In Administrate (rubygem) before version 0.13.0, when sortin…8.1
• CVE-2020-5258In affected versions of dojo (NPM package), the deepCopy met…7.7
• CVE-2020-5259In affected versions of dojox (NPM package), the jqMix metho…8.6
• CVE-2020-5260Affected versions of Git have a vulnerability whereby Git ca…7.5
• CVE-2020-5261Saml2 Authentication services for ASP.NET (NuGet package Sus…6.8
• CVE-2020-5263auth0.js (NPM package auth0-js) greater than version 8.0.0 a…4.9
• CVE-2020-5264In PrestaShop before version 1.7.6.5, there is a reflected X…6.1
• CVE-2020-5265In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is…6.1
• CVE-2020-5266In the ps_link module for PrestaShop before version 3.1.0, t…5.4
• CVE-2020-5267In ActionView before versions 6.0.2.2 and 5.2.4.2, there is …4.8
• CVE-2020-5268In Saml2 Authentication Services for ASP.NET versions before…7.3