| Package | Affected versions | Patched versions |
|---|---|---|
| sonarqube | = 8.4.2.36762 |
SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. NOTE: reportedly, the vendor's position for SMTP and SVN is "it is the administrator's responsibility to configure it.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free