Status
Justification
Impact
Sonarqube's CVE review and treatment reports that SonarQube is not vulnerable because it requires privilege to modify a configuration parameter that is not exposed by SonarQube. Relevant URL: https://github.com/SonarSource/sonarqube/blob/master/sonar-application/src/main/assembly/security/CVE-review-and-treatment-status-sqcb.csv#L34:~:text=34-,CVE%2D2025%2D11226,-logback%2Dcore%401.5.18
Status