Cloud-based SAST platform for code quality and security analysis
by Sonar · sonarsource.com · source ↗
In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API
Jenkins GitHub Pull Request Coverage Status Plugin 2.2.0 and earlier stores the GitHub Personal Access Token, Sonar access token and Sonar password unencrypted in its global configuration file on the …
A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows attackers to have Jenkins connect to Gerrit servers (previously configured by Jenk…
No datasheets, whitepapers, case studies, videos, or demos linked yet.