Skip to contentJetbrains vulnerabilities
Newest
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity...CVE-2020-116862.7 Low
- jetbrains golandIn JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.CVE-2020-116857.5 High
- jetbrains spaceJetBrains Space through 2020-04-22 allows stored XSS in Chats.CVE-2020-114165.4 Medium
- jetbrains pycharmIn JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were...CVE-2020-116947.5 High
- jetbrains scalaIn the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over...CVE-2020-79077.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file...CVE-2020-79147.5 High
- jetbrains youtrackJetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description.CVE-2020-79136.1 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups.CVE-2020-79125.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS.CVE-2020-79116.1 Medium
- jetbrains teamcityJetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the...CVE-2020-79105.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI.CVE-2020-79097.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages.CVE-2020-79084.3 Medium
- jetbrains riderIn JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries...CVE-2020-79067.5 High
- jetbrains intellij ideaPorts listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network.CVE-2020-79057.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead...CVE-2020-79047.4 High
- jetbrains ktorRequest smuggling is possible in Ktor when both chunked TE and content length specifiedCVE-2020-5207Fix available5.4 Medium
- jetbrains idetalkJetBrains IDETalk plugin before version 193.4099.10 allows XXECVE-2019-184127.5 High
- jetbrains ktorImproper Neutralization of Input During Web Page Generation (Cross-site Scripting) in KtorCVE-2019-193895.4 Medium
- jetbrains ktorURL Redirection to Untrusted Site (Open Redirect) in KtorCVE-2019-19703Fix available6.1 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the...CVE-2019-183695.3 Medium
- jetbrains toolboxIn JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible.CVE-2019-183687.3 High
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user...CVE-2019-183675.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View...CVE-2019-183665.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages.CVE-2019-183654.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow...CVE-2019-183649.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a...CVE-2019-183635.3 Medium
- jetbrains mpsJetBrains MPS before 2019.2.2 exposed listening ports to the network.CVE-2019-183625.3 Medium
- jetbrains intellij ideaJetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading...CVE-2019-183615.3 Medium
- jetbrains hubIn JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through...CVE-2019-183605.3 Medium
- jetbrains upsourceServer metadata could be exposed because one of the error messages reflected the whole response...CVE-2019-121565.3 Medium
- jetbrains teamcity, upsource +1 moreIn JetBrains TeamCity versions before 2018.2.5 and UpSource versions before 2018.2 build 1293,...CVE-2019-121579.8 Critical
- jetbrains ktorJetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for...CVE-2019-127369.8 Critical
- jetbrains ktorUserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a...CVE-2019-127375.3 Medium
- jetbrains youtrackJetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without...CVE-2019-149564.3 Medium
- jetbrains pycharmJetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection...CVE-2019-149587.5 High
- jetbrains toolboxJetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection.CVE-2019-149595.9 Medium
- jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could...CVE-2019-150367.2 High
- jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. It had several XSS vulnerabilities on the...CVE-2019-150376.1 Medium
- jetbrains youtrackJetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page.CVE-2019-150408.8 High
- jetbrains youtrackIn JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.CVE-2019-161716.1 Medium
- jetbrains resharperJetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability.CVE-2019-164077.3 High
- jetbrains youtrackJetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of...CVE-2019-150416.1 Medium
- jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could...CVE-2019-150354.9 Medium
- jetbrains upsourceJetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block...CVE-2019-149616.1 Medium
- jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. It had no SSL certificate validation for...CVE-2019-150427.5 High
- jetbrains riderJetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin...CVE-2019-149607.8 High
- jetbrains hubIn JetBrains Hub versions earlier than 2018.4.11436, there was no option to force a user to...CVE-2019-149555.3 Medium
- jetbrains youtrackJetBrains YouTrack versions before 2019.2.53938 had a possible XSS through issue attachments when...CVE-2019-149536.1 Medium
- jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some...CVE-2019-150387.5 High
- jetbrains vimThe JetBrains Vim plugin before version 0.52 was storing individual project data in the global...CVE-2019-149575.3 Medium
- Show moreLoading…