How can i report security bug and a CVE(Common Vulnerabilities and Exposures) for sonarqube application, whats the procedure

[Tobias_Trabelsi]

Hi @jyotisharma2793 ,

welcome to the community

you can check out this guide here on how to report security related issues to sonarsource:

Responsible Vulnerability Disclosure

Follow this guide if you’ve found a vulnerability in one of Sonar’s products or websites and you want to responsibly report it. Sonar customers with a support contract can report the vulnerability directly through the support channel. Otherwise, send an email to security@sonarsource.com. What we need from you: Detail the steps you followed that make the vulnerability exploitable including any URLs or code you used. The more information you provide, the faster we can reproduce and fix the pr…