User Field Exposure Vulnerability in SonarQube by SonarSource

CVE-2025-62292

What is CVE-2025-62292?

In SonarQube prior to versions 25.6, 2025.3 Commercial, and 2025.1.3 LTA, a vulnerability exists that allows authenticated low-privileged users to gain unauthorized access to sensitive user information. Specifically, these users can exploit the /api/v2/users-management/users endpoint to retrieve administrative fields, such as email addresses, which are typically restricted to higher privilege levels. This exposure poses significant privacy risks and should be addressed promptly.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References