SonarSource SonarQube Server < 9.9.5 / 10.x < 10.5 GitHub Integration JWT Exfiltration (CVE-2024-47910)

The version of SonarSource SonarQube Server running on the remote host is prior to 9.9.5 or 10.x prior to 10.5. It is, therefore, affected by an information disclosure vulnerability: - A SonarQube user with the Administrator role can modify an existing configuration of a GitHub integration to...

CVE-2024-47910

creationtimestamp| type| source ---|---|--- 2024-10-04 23:33:49+00:00| seen| https://t.me/cvedetector/7028...

CVE-2024-47910

SonarSource SonarQube versions before 9.9.5 LTA and 10.x before 10.5 are vulnerable to an information disclosure flaw. A user with the Administrator role can modify existing GitHub integration configurations to exfiltrate a pre-signed JWT . To remediate, users should update to version 9.9.5 LTA o...