"path traversal" in 9.9.3

SonarQube Server / Community Build
1
  • Version: Sonarqube 9.9.3 Enterprise edition
  • How is SonarQube deployed: zip

We are installing this version in our on-prem server. Before going production our Cibersecurity area ran som security tests on the SonarQube URL. Unfortunately they found a high vulnerability: The “path traversal” one that it is supposed to be fixed as soon as possible.

References:

I wonder if this is something you are aware of or if it is fixed in any other version. I tried to look for it in your jira but found nothing.

Thanks

2

Hi,

I’ve unlisted your topic since you’re reporting a vulnerability. Our responsible disclosure policy asks that you email security@sonarsource.com rather than making public posts. Could you please re-send this to security@sonarsource.com?

 
Thanks