Skip to content
OpenAdvisories

Package · Maven

org.sonarsource.sonarqube:sonar-plugin-api

1 known vulnerabilities.

1 result · Feed

  • Medium 4.3

    Exposure of Sensitive Information to an Unauthorized Actor in SonarSource SonarQube API

    A vulnerability in the API of SonarSource SonarQube before 7.4 could allow an authenticated user to discover sensitive information such as valid user-account logins in the web application. The vulnerability occurs because of improperly configured access contr…