Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.7	EPSS 0.5%	CVE-2024-47911sonarqube · SQL Injection Medium6.7EPSS 0.5%2024-10-04CVE Database V5CVE-2024-47911 In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint that allows SonarQube users with the administrator role to inject blind SQL commands. EPSS 0.5%Vulnerability CWE-89	CVE Database V5	2024-10-04
High	7.2	EPSS 0.5%	CVE-2024-47910sonarqube · Improper Access Control High7.2EPSS 0.5%2024-10-04CVE Database V5CVE-2024-47910 An issue was discovered in SonarSource SonarQube before 9.9.5 LTA and 10.x before 10.5. A SonarQube user with the Administrator role can modify an existing configuration of a GitHub integration to exfiltrate a pre-signed JWT. EPSS 0.5%Vulnerability CWE-284	CVE Database V5	2024-10-04

Page 1 of 1