Skip to contentJetbrains vulnerabilities
Newest
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was...CVE-2022-243409.8 Critical
- jetbrains teamcityJetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS.CVE-2022-243395.4 Medium
- jetbrains teamcityJetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS.CVE-2022-243386.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked...CVE-2022-243376.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via...CVE-2022-243365.3 Medium
- jetbrains teamcityJetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race...CVE-2022-243358.1 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private...CVE-2022-243345.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible.CVE-2022-243336.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie.CVE-2022-243325.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible.CVE-2022-243319.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible.CVE-2022-243306.1 Medium
- jetbrains kotlin, oracle communications cloud native core binding support function, communications pricing design center +2 moreImproper Locking in JetBrains KotlinCVE-2022-24329Fix available5.3 Medium
- jetbrains hubIn JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS.CVE-2022-243286.5 Medium
- jetbrains hubIn JetBrains Hub before 2021.1.13890, integration with JetBrains Account exposed an API key with...CVE-2022-243277.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases.CVE-2021-432029.8 Critical
- jetbrains hubIn JetBrains Hub before 2021.1.13690, information disclosure via avatar metadata is possible.CVE-2021-431807.5 High
- jetbrains hubIn JetBrains Hub before 2021.1.13415, a DoS via user information is possible.CVE-2021-431827.5 High
- jetbrains hubIn JetBrains Hub before 2021.1.13690, stored XSS is possible.CVE-2021-431816.1 Medium
- jetbrains hubIn JetBrains Hub before 2021.1.13690, the authentication throttling mechanism could be bypassed.CVE-2021-431839.8 Critical
- jetbrains ktorIn JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is...CVE-2021-432037.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, user enumeration was possible.CVE-2021-431945.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, remote code execution via the agent push functionality is...CVE-2021-431939.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection...CVE-2021-431967.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, some HTTP security headers were missing.CVE-2021-431955.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.CVE-2021-431976.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are...CVE-2021-431995.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, stored XSS is possible.CVE-2021-431985.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, permission checks in the Agent Push functionality were...CVE-2021-432009.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.3, a newly created project could take settings from an...CVE-2021-432015.3 Medium
- jetbrains youtrack mobileIn JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive...CVE-2021-431875.3 Medium
- jetbrains youtrack mobileIn JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete.CVE-2021-431887.3 High
- jetbrains youtrack mobileIn JetBrains YouTrack Mobile before 2021.2, access token protection on Android is incomplete.CVE-2021-431897.3 High
- jetbrains youtrack mobileIn JetBrains YouTrack Mobile before 2021.2, task hijacking on Android is possible.CVE-2021-431905.3 Medium
- jetbrains youtrack mobileIn JetBrains YouTrack Mobile before 2021.2, iOS URL scheme hijacking is possible.CVE-2021-431925.3 Medium
- jetbrains youtrack mobileJetBrains YouTrack Mobile before 2021.2, is missing the security screen on Android and iOS.CVE-2021-431915.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2021.3.21051, stored XSS is possible.CVE-2021-431845.4 Medium
- jetbrains youtrackJetBrains YouTrack before 2021.3.23639 is vulnerable to Host header injection.CVE-2021-431859.8 Critical
- jetbrains youtrackJetBrains YouTrack before 2021.3.24402 is vulnerable to stored XSS.CVE-2021-431865.4 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding...CVE-2021-375544.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.CVE-2021-375537.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.CVE-2021-375515.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2021.2.17925, stored XSS was possible.CVE-2021-375525.4 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.CVE-2021-375507.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient.CVE-2021-375499.1 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS.CVE-2021-375487.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.CVE-2021-375475.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted...CVE-2021-375465.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were...CVE-2021-375457.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.4, there was an insecure deserialization.CVE-2021-375449.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, XSS was possible.CVE-2021-375426.1 Medium
- Show moreLoading…