Skip to content
OpenAdvisories

Vendor

Sonarqube

1 known vulnerabilities.

Products

SonarQube 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2020-37020

    SonarQube 8.3.1 - Unquoted Service Path

    SonarQube 8.3.1 contains an unquoted service path vulnerability that allows local attackers to gain SYSTEM privileges by exploiting the service executable path. Attackers can replace the wrapper.exe in the service path with a malicious executable to execute c…

    Sonarqube SonarQube