Skip to contentJetbrains vulnerabilities
Newest
- jetbrains youtrackIn JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread...CVE-2023-508714.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.1 a CSRF on login was possibleCVE-2023-508704.3 Medium
- artifacthub hubArbitrary file read in Artifact HubCVE-2023-45823Fix available7.5 High
- artifacthub hubUnsafe rego built-in allowed in Artifact HubCVE-2023-45822Fix available3.7 Low
- artifacthub hubIncorrect Docker Hub registry check in Artifact HubCVE-2023-45821Fix available5.4 Medium
- jetbrains ktorIn JetBrains Ktor before 2.3.5 server certificates were not verifiedCVE-2023-456136.8 Medium
- jetbrains ktorIn JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was...CVE-2023-45612Public exploit8.6 High
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configurationCVE-2023-435663.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server...CVE-2023-42793In KEVPublic exploitEPSS 100.0%9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registrationCVE-2023-412503.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build StepCVE-2023-41249EPSS 55.5%4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configurationCVE-2023-412484.6 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissionsCVE-2023-392615.2 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possibleCVE-2023-391754.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue...CVE-2023-391744.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain...CVE-2023-391735.4 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain casesCVE-2023-380693.3 Low
- jetbrains youtrackIn JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk formsCVE-2023-380686.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written...CVE-2023-380674.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during...CVE-2023-380664.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possibleCVE-2023-380654.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be...CVE-2023-380644.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possibleCVE-2023-380634.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI...CVE-2023-380624.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possibleCVE-2023-380614.6 Medium
- jetbrains teamcityJetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a...CVE-2015-13136.5 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2023.1.10518 stored XSS in a Markdown-rendering engine was possibleCVE-2023-350544.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk formsCVE-2023-350537.5 High
- go standard library runtime, golang go, fedoraproject fedora +2 moreUnsafe behavior in setuid/setgid binaries in runtimeCVE-2023-29403Fix available7.8 High
- jetbrains ktorIn JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the...CVE-2023-343393.3 Low
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possibleCVE-2023-342294.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for...CVE-2023-342285.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacksCVE-2023-342275.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possibleCVE-2023-342264.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possibleCVE-2023-34225EPSS 60.7%4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possibleCVE-2023-342244.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies...CVE-2023-342234.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possibleCVE-2023-342224.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possibleCVE-2023-342214.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possibleCVE-2023-34220EPSS 61.4%4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate...CVE-2023-342194.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin...CVE-2023-342189.1 Critical
- jetbrains toolbox, toolbox app +1 moreIn JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possibleCVE-2022-484815.2 Medium
- jetbrains hubIn JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missingCVE-2022-484774.1 Medium
- jetbrains ktorIn JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possibleCVE-2022-484767.5 High
- jetbrains phpstormIn JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log fileCVE-2022-484353.3 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in...CVE-2022-484336.1 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.CVE-2022-484325.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be...CVE-2022-484314.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external...CVE-2022-484305.5 Medium
- Show moreLoading…