Sonarqube@* Security Vulnerabilities and Issues — Sonarqube@* CVE List

Lucene search

SonarsourceSonarqube*

3 matches found

CVE•added 2019/10/14 3:15 p.m.•60 views

CVE-2019-17579

SonarSource SonarQube before 7.8 has XSS in project links on account/projects.

6.1CVSS5.9AI score0.00328EPSS

CVE•added 2018/12/14 3:29 p.m.•57 views

CVE-2018-19413

A vulnerability in the API of SonarSource SonarQube before 7.4 could allow an authenticated user to discover sensitive information such as valid user-account logins in the web application. The vulnerability occurs because of improperly configured access controls that cause the API to return the ext...

4.3CVSS4.3AI score0.00541EPSS

CVE•added 2024/06/16 3:15 p.m.•50 views

CVE-2024-38460

In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartext as part of the URL parameters in the logs (such as SonarQube Access Logs, Proxy Logs, etc).

6.5CVSS7AI score0.00135EPSS