SonarQube

SonarQube Cloud Token Disclosure

Sonarqube with public projects

Sonarqube public projects detected.

SonarQube Default Login - Detect

SonarQube contains a default login vulnerability. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute unauthorized operations.

SonarQube Token Disclosure

SonarQube - Information Disclosure

Information leakage vulnerability in an interface of SonarQube, you can download the source code through the tool.

SonarQube - Authentication Bypass

SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI.