Enterprise EditionVersion 9.4 and CVE-2022-41852, CVE-2022-42889

SonarQube Server / Community Build
,
1

We are using EE 9.4. Are we affected by CVE-2022-41852, CVE-2022-42889 vulnerabilties?

2

Hello @Karthik_Ramachandran, thanks a lot for taking the time to participate to the community.

As you may not know, we are only supporting Latest SonarQube version ( 9.7.1 ) and LTS ( 8.9.10 ).

I would highly suggest you to upgrade to the latest version or use the LTS. As we are fixing vulnerabilities only on those supported versions.

Jeremy Cotineau

7

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.