Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-38460
4.9
MEDIUMCVSS v3
Published
June 16, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartext as part of the URL parameters in the logs (such as SonarQube Access Logs, Proxy Logs, etc).
GitHub