admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-06-19 17:30:12 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-38460.md
0xMarcio 6100550298 Update CVE sources 2024-06-22 09:37
2024-06-22 09:37:59 +00:00

708 B
Raw Blame History

CVE-2024-38460

Description

In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartext as part of the URL parameters in the logs (such as SonarQube Access Logs, Proxy Logs, etc).

POC

Reference

Github

No PoCs found on GitHub currently.