https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 07 Jun 2026 04:35:32 +0000 https://vulnerability.circl.lu/sighting/944631b8-412a-4223-a2bd-3fe42485b5f8/export {"uuid": "944631b8-412a-4223-a2bd-3fe42485b5f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28002", "type": "seen", "source": "https://t.me/arpsyndicate/1696", "content": "#ExploitObserverAlert\n\nCVE-2020-28002\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2020-28002. In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.login option, anonymous authentication is forced. This allows creating and overwriting public and private projects via the /api/ce/submit endpoint.\n\nFIRST-EPSS: 0.001020000\nNVD-IS: 1.4\nNVD-ES: 3.9", "creation_timestamp": "2023-12-11T03:38:24.000000Z"} {"uuid": "944631b8-412a-4223-a2bd-3fe42485b5f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28002", "type": "seen", "source": "https://t.me/arpsyndicate/1696", "content": "#ExploitObserverAlert\n\nCVE-2020-28002\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2020-28002. In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.login option, anonymous authentication is forced. This allows creating and overwriting public and private projects via the /api/ce/submit endpoint.\n\nFIRST-EPSS: 0.001020000\nNVD-IS: 1.4\nNVD-ES: 3.9", "creation_timestamp": "2023-12-11T03:38:24.000000Z"} https://vulnerability.circl.lu/sighting/944631b8-412a-4223-a2bd-3fe42485b5f8/export Mon, 11 Dec 2023 03:38:24 +0000