Skip to contentJetbrains vulnerabilities
Newest
- jetbrains youtrackJetBrains YouTrack versions before 2019.1.52584 had a possible XSS in the issue titles.CVE-2019-149526.1 Medium
- jetbrains intellij ideaJetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link...CVE-2019-149545.9 Medium
- jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution...CVE-2019-15039Public exploitEPSS 13.1%9.8 Critical
- jetbrains teamcityJetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it...CVE-2019-158486.1 Medium
- jetbrains youtrackAn SSRF attack was possible on a JetBrains YouTrack server. The issue (1 of 2) was fixed in...CVE-2019-128529.8 Critical
- jetbrains teamcityA user without the required permissions could gain access to some JetBrains TeamCity settings....CVE-2019-128464.3 Medium
- jetbrains teamcityA reflected XSS on a user page was detected on one of the JetBrains TeamCity pages. The issue was...CVE-2019-128426.1 Medium
- jetbrains teamcityIncorrect handling of user input in ZIP extraction was detected in JetBrains TeamCity. The issue...CVE-2019-128417.5 High
- jetbrains teamcityA possible stored JavaScript injection requiring a deliberate server administrator action was...CVE-2019-128436.1 Medium
- jetbrains teamcityThe generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving...CVE-2019-128455.3 Medium
- jetbrains teamcityA possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The...CVE-2019-128446.1 Medium
- jetbrains intellij ideaIn several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration ...CVE-2019-101049.8 Critical
- jetbrains intellij ideaIn several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations...CVE-2019-98739.8 Critical
- jetbrains intellij ideaIn several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud...CVE-2019-98728.1 High
- jetbrains intellij ideaIn several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default...CVE-2019-91869.8 Critical
- jetbrains hubIn JetBrains Hub versions earlier than 2018.4.11298, the audit events for SMTPSettings show a...CVE-2019-128477.2 High
- jetbrains youtrackAn Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was...CVE-2019-128669.8 Critical
- jetbrains youtrackCertain actions could cause privilege escalation for issue attachments in JetBrains YouTrack. The...CVE-2019-128679.8 Critical
- jetbrains youtrackA query injection was possible in JetBrains YouTrack. The issue was fixed in YouTrack 2018.4.49168.CVE-2019-128509.8 Critical
- jetbrains youtrackA CSRF vulnerability was detected in one of the admin endpoints of JetBrains YouTrack. The issue...CVE-2019-128518.8 High
- jetbrains youtrack integrationIn JetBrains YouTrack Confluence plugin versions before 1.8.1.3, it was possible to achieve...CVE-2019-101009.8 Critical
- jetbrains intellij ideaIn several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE...CVE-2019-98239.8 Critical
- jetbrains kotlinJetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template...CVE-2019-101038.1 High
- jetbrains kotlin, ktor +1 moreJetBrains Ktor framework (created using the Kotlin IDE template) versions before 1.1.0 were...CVE-2019-101028.1 High
- jetbrains kotlinJetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during...CVE-2019-101018.1 High
- jetbrains dotpeek, resharper ultimate +1 moreJetBrains dotPeek before 2018.2 and ReSharper Ultimate before 2018.1.4 allow attackers to execute...CVE-2018-148787.8 High
- jetbrains intellij ideaIntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can...CVE-2017-83167.5 High
- jetbrains teamcityCross-site scripting (XSS) vulnerability in JetBrains TeamCity before 8.1 allows remote attackers...CVE-2014-100364.3 Medium
- jetbrains teamcityUnspecified vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to obtain...CVE-2014-100025.0 Medium