Skip to contentJetbrains vulnerabilities
Newest
- jetbrains ktorIn JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default.CVE-2021-257635.3 Medium
- jetbrains ktorIn JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible.CVE-2021-257615.3 Medium
- jetbrains kotlin, oracle communications cloud native core network slice selection function, communications cloud native core policy +1 more +3 moreIncorrect Default Permissions in JetBrains KotlinCVE-2020-29582Fix available5.3 Medium
- jetbrains hubIn JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible.CVE-2021-257605.3 Medium
- jetbrains hubIn JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other...CVE-2021-257596.5 Medium
- jetbrains hubIn JetBrains Hub before 2020.1.12629, an open redirect was possible.CVE-2021-257576.1 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace...CVE-2021-257587.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories...CVE-2021-257565.3 Medium
- jetbrains code with meIn JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID,...CVE-2021-257552.5 Low
- jetbrains ideavimJetBrains IdeaVim before version 0.58 might have caused an information leak in limited...CVE-2020-276237.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2020.2, the built-in web server could expose information about...CVE-2020-276225.3 Medium
- jetbrains ktorIn JetBrains Ktor before 1.4.1, HTTP request smuggling was possible.CVE-2020-261296.5 Medium
- jetbrains teamcityJetBrains TeamCity before 2020.1.2 was vulnerable to URL injection.CVE-2020-276276.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.1.5, the Guest user had access to audit records.CVE-2020-276284.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.1.5, secure dependency parameters could be not masked in...CVE-2020-276295.3 Medium
- jetbrains toolboxJetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser...CVE-2020-252079.8 Critical
- jetbrains toolboxJetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser...CVE-2020-250137.5 High
- jetbrains youtrackJetBrains YouTrack before 2020.3.888 was vulnerable to SSRF.CVE-2020-276245.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues.CVE-2020-276255.3 Medium
- jetbrains youtrackJetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF.CVE-2020-276265.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to...CVE-2020-252097.5 High
- jetbrains youtrackSensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0...CVE-2020-243663.3 Low
- jetbrains youtrackIn JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without...CVE-2020-252105.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.2.10514, SSRF is possible because URL filtering can be escaped.CVE-2020-158227.3 High
- jetbrains youtrackIn JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019...CVE-2020-246186.5 Medium
- jetbrains upsourceIn JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect...CVE-2019-197047.5 High
- jetbrains teamcityJetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI.CVE-2020-158306.1 Medium
- jetbrains teamcityJetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI.CVE-2020-158316.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user...CVE-2020-158286.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs.CVE-2020-158295.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other...CVE-2020-158258.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have.CVE-2020-158264.3 Medium
- jetbrains toolboxIn JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted...CVE-2020-158277.5 High
- jetbrains kotlin, oracle banking extensibility workbench, communications cloud native core policy +2 moreIn JetBrains Kotlin before 1.4.0, there is a script-cache privilege escalation vulnerability due...CVE-2020-158248.8 High
- jetbrains youtrackJetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component.CVE-2020-158237.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article...CVE-2020-158216.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.2.6881, the markdown parser could disclose hidden file existence.CVE-2020-158205.3 Medium
- jetbrains youtrackJetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports.CVE-2020-158195.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.1.1331, an external user could execute commands against...CVE-2020-158178.8 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence.CVE-2020-158185.3 Medium
- jetbrains teamcityIn JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled...CVE-2020-119384.9 Medium
- jetbrains spaceIn JetBrains Space through 2020-04-22, the password authentication implementation was insecure.CVE-2020-117969.8 Critical
- jetbrains spaceIn JetBrains Space through 2020-04-22, the session timeout period was configured improperly.CVE-2020-117957.5 High
- jetbrains youtrackJetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a...CVE-2020-116937.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators.CVE-2020-116922.7 Low
- jetbrains hubIn JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible.CVE-2020-116917.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted...CVE-2020-116909.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import...CVE-2020-116896.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his...CVE-2020-116887.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on...CVE-2020-116877.5 High
- Show moreLoading…