CVE-2020-27986

概要

参考情報

• csl.com.co/sonarqube-auditando-al-auditor-parte-i · Vendor Advisory

sonarqube のその他の脆弱性

• CVE-2024-47911高 7.2In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint …
• CVE-2024-38460中 6.5In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartex…
• CVE-2020-28002中 5.3In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.…
• CVE-2019-17579中 6.1SonarSource SonarQube before 7.8 has XSS in project links on account/projects.
• CVE-2018-19413中 4.3A vulnerability in the API of SonarSource SonarQube before 7.4 could allow an authenticated user to discover sensitive information such as v…