high7.2
CVE-2024-47910
An issue was discovered in SonarSource SonarQube before 9.9.5 LTA and 10.x before 10.5.
Impact
An issue was discovered in SonarSource SonarQube before 9.9.5 LTA and 10.x before 10.5. A SonarQube user with the Administrator role can modify an existing configuration of a GitHub integration to exfiltrate a pre-signed JWT.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| SonarSource | SonarSource SonarQube | before 9.9.5 |
| LTA And 10.X | before 10.5. |
Versions were read from the advisory text. No structured product data has been published for this record yet.