Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

sonarsource/sonarqube

              master @ c08efd5
            

Fixes

CVEs

HIGH

Peak severity

0.0%

Coverage

Highlights

Auth Bypass: 1 prior fix. Scrutinize any change in this area.

server/sonar-auth-gitlab/src/main/java/org/sonar/auth/gitlab/GitLabSettings.java: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Misconfiguration in SaaS GitLab integrations can lead to accidental global group access delegation and privilege escalation, allowing unauthorized users to gain access to SonarQube resources. This is prevented by explicitly disabling global group access settings when integrated with public SaaS GitLab.com.

SQL Injection: Unsanitized input in the authorizations/group-memberships API endpoint allowed SonarQube administrators to execute arbitrary SQL commands. Developers must ensure all database interactions on configuration APIs use strictly parameterized queries.

Information Disclosure: Encrypted values generated via the Settings Encryption feature were exposed in cleartext within URL parameters in logs. Sensitive parameters must be masked or scrubbed from request logs and URLs to prevent exposure to unauthorized network observers.