Skip to contentJetbrains vulnerabilities
Newest
- jetbrains teamcityIn JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's...CVE-2022-446462.2 Low
- jetbrains teamcityIn JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build...CVE-2022-446246.5 Medium
- jetbrains teamcityIn JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in...CVE-2022-446236.5 Medium
- jetbrains teamcityIn JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token...CVE-2022-446222.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged...CVE-2022-409794.4 Medium
- jetbrains intellij ideaThe installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order...CVE-2022-409787.5 High
- jetbrains ktorJetBrain Ktor before 2.1.0 vulnerable to selection of wrong authentication providerCVE-2022-38180Fix available5.3 Medium
- jetbrains ktorJetBrains Ktor before 2.1.0 was vulnerable to a Reflect File Download attackCVE-2022-38179Fix available4.7 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in...CVE-2022-381333.2 Low
- jetbrains riderIn JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to...CVE-2022-373964.1 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not...CVE-2022-370103.6 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possibleCVE-2022-370093.9 Low
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.2 build parameter injection was possibleCVE-2022-363225.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in...CVE-2022-363214.1 Medium
- jetbrains hubIn JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of...CVE-2022-348943.5 Low
- jetbrains ktorSHA1 implementation in JetBrains Ktor Native before 2.0.1 was returning the same valueCVE-2022-299308.7 High
- jetbrains teamcityIn JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possibleCVE-2022-299293.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possibleCVE-2022-299284.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possibleCVE-2022-299274.6 Medium
- jetbrains rider, pycharm +1 moreIn JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation...CVE-2022-298216.9 Medium
- jetbrains pycharmIn JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was...CVE-2022-298203.0 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation...CVE-2022-298196.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawedCVE-2022-298183.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server...CVE-2022-298173.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possibleCVE-2022-298162.8 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possibleCVE-2022-298156.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom...CVE-2022-298146.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possibleCVE-2022-298136.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode...CVE-2022-298122.3 Low
- jetbrains hubIn JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible.CVE-2022-298116.1 Medium
- jetbrains ktorIn JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't...CVE-2022-290353.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fieldsCVE-2022-286518.4 High
- jetbrains youtrackIn JetBrains YouTrack before 2022.1.43700 it was possible to inject JavaScript into Markdown in...CVE-2022-286507.3 High
- jetbrains youtrackIn JetBrains YouTrack before 2022.1.43563 it was possible to include an iframe from a third-party...CVE-2022-286494.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2022.1.43563 HTML code from the issue description was being renderedCVE-2022-286485.7 Medium
- jetbrains youtrackJetBrains YouTrack before 2021.4.40426 was vulnerable to SSTI (Server-Side Template Injection)...CVE-2022-24442Public exploit9.8 Critical
- jetbrains hubJetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS.CVE-2022-252596.1 Medium
- jetbrains hubJetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).CVE-2022-25260Public exploit9.1 Critical
- jetbrains teamcityJetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS.CVE-2022-252616.1 Medium
- jetbrains hubIn JetBrains Hub before 2022.1.14434, SAML request takeover was possible.CVE-2022-25262Public exploit9.8 Critical
- jetbrains teamcityJetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push...CVE-2022-252639.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be...CVE-2022-252647.5 High
- jetbrains clion, goland, intellij idea +4 more +6 moreJetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3...CVE-2021-459779.8 Critical
- jetbrains youtrackJetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon.CVE-2022-243475.4 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override)...CVE-2022-243467.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.2.4, local code execution (without permission from a user)...CVE-2022-243457.8 High
- jetbrains youtrackJetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates...CVE-2022-243445.4 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only...CVE-2022-243434.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.CVE-2022-24342Public exploit8.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't...CVE-2022-243417.5 High
- Show moreLoading…