Vulnerability with springshell, is SonarQube impacted

SonarQube
1

Good morning,

Using Sonarqube 8.9.6, I’m wondering if it could be impacted by the vulnerability raised yesterday by Sonatype:New Spring Framework RCE  Vulnerability Confirmed - What to do?

It impacts java applications using spring-code fmk and JDK 9 and above.

thanks for your feedback
Sebastien.

2

Hey there.

SonarQube is not affected.

3

Thank you for your answer.