CVE-2024-47911

In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint that allows…

Medium · published October 4, 2024

CVSS v3.1
6.7
EPSS
0%
Percentile
38.2
In the wild
Unconfirmed
What it is

In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint that allows SonarQube users with the administrator role to inject blind SQL commands.

The record
Technical detail
CVSS v3.1
6.7 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:H/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00451 · 38.2th percentile
Published
2024-10-04T00:00Z
EPSS history
Timeline
  • 04 OCT 00:00Z
    In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint that allows…
    cvelistv5