{"action":"Upgrade org.sonarsource.sonarqube:sonar-plugin-api to 7.5 or later.","affected":[{"fixed":"7.5","introduced":"0"}],"component":"org.sonarsource.sonarqube:sonar-plugin-api","cve_ids":["CVE-2018-19413"],"ecosystem":"Maven","epss":0.0115,"exploited":false,"fixed_versions":["7.5"],"ghsa_id":"GHSA-m643-2pfv-xwm8","id":"tcs_01M5N94GQXE4P3KPVT28PBRX2A","modified_at":"2024-03-04T22:46:21.813592Z","published_at":"2022-05-14T01:43:42Z","references":["https://osv.dev/vulnerability/GHSA-m643-2pfv-xwm8","https://nvd.nist.gov/vuln/detail/CVE-2018-19413","https://github.com/SonarSource/sonarqube/commit/7b567ba3d15ed7dd0b0bba0330686487e35af85c","https://jira.sonarsource.com/browse/SONAR-11305","http://packetstormsecurity.com/files/150496/SonarSource-SonarQube-7.3-Information-Disclosure.html"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-m643-2pfv-xwm8","url":"https://osv.dev/vulnerability/GHSA-m643-2pfv-xwm8"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in SonarSource SonarQube API"}