Skip to contentJetbrains vulnerabilities
Newest
- jetbrains rubymineIn JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for...CVE-2021-375438.8 High
- jetbrains hubIn JetBrains Hub before 2021.1.13402, HTML injection in the password reset email was possible.CVE-2021-375416.1 Medium
- jetbrains hubIn JetBrains Hub before 2021.1.13262, a potentially insufficient CSP for the Widget deployment...CVE-2021-375406.5 Medium
- jetbrains hubIn JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.CVE-2021-362099.8 Critical
- jetbrains webstormIn JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for...CVE-2021-318979.8 Critical
- jetbrains webstormIn JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.CVE-2021-318987.5 High
- jetbrains upsourceIn JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctlyCVE-2021-304827.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was...CVE-2021-319159.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was...CVE-2021-319149.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during...CVE-2021-319137.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a...CVE-2021-319128.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages.CVE-2021-319116.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible.CVE-2021-319107.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages.CVE-2021-319085.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was...CVE-2021-319099.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, stored XSS on a tests page was possible.CVE-2021-33155.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, permission checks for changing TeamCity plugins were...CVE-2021-319075.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, audit logs were not sufficient when an administrator...CVE-2021-319062.7 Low
- jetbrains teamcityInformation disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible...CVE-2021-263093.3 Low
- jetbrains teamcityIn the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible.CVE-2021-263107.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, XSS was potentially possible on the test history page.CVE-2021-319046.1 Medium
- jetbrains pycharmIn JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient...CVE-2021-30005Public exploit7.8 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.6.8801, information disclosure in an issue preview was possible.CVE-2021-319057.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was...CVE-2021-319027.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently,...CVE-2021-319036.1 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment.CVE-2021-277335.4 Medium
- jetbrains hubIn JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the...CVE-2021-319017.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation.CVE-2021-305047.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient...CVE-2021-292637.8 High
- jetbrains intellij ideaIn IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure.CVE-2021-300067.5 High
- jetbrains code with meIn JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could...CVE-2021-319005.3 Medium
- jetbrains code with meIn JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could...CVE-2021-318998.8 High
- jetbrains phpstormIn JetBrains PhpStorm before 2020.3, source code could be added to debug logs.CVE-2021-257645.3 Medium
- jetbrains teamcityJetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose...CVE-2020-35667Public exploit7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly.CVE-2021-257775.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.1, permissions during user deletion were checked improperly.CVE-2021-257785.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.1, the server admin could create and see access tokens for...CVE-2021-257753.8 Low
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of...CVE-2021-257744.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters.CVE-2021-257767.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration.CVE-2021-257725.3 Medium
- jetbrains teamcityJetBrains TeamCity before 2020.2 was vulnerable to reflected XSS on several pages.CVE-2021-257736.1 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed.CVE-2021-257714.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible,...CVE-2021-257709.8 Critical
- jetbrains youtrackIn JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access...CVE-2021-257697.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked...CVE-2021-257685.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack...CVE-2021-257675.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.4.4701, improper resource access checks were made.CVE-2021-257665.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.4.4701, an attacker could enumerate users via the REST API...CVE-2020-252085.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible.CVE-2021-257658.8 High
- jetbrains ktorIn JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible.CVE-2021-257625.3 Medium
- Show moreLoading…