We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
An issue was discovered in SonarSource SonarQube before 9.9.5 LTA and 10.x before 10.5. A SonarQube user with the Administrator role can modify an existing configuration of a GitHub integration to exfiltrate a pre-signed JWT.
Reserved 2024-10-04 | Published 2024-10-04 | Updated 2024-10-04 | Assigner mitresonarsource.atlassian.net/browse/SONAR-21795
sonarsource.atlassian.net/browse/SONAR-21813
community.sonarsource.com/...tion-information-leakage/126609
Support options
