Skip to contentJetbrains vulnerabilities
Newest
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details...CVE-2024-563524.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user rolesCVE-2024-563516.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 build credentials allowed unauthorized viewing of projectsCVE-2024-563504.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify...CVE-2024-563495.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 improper access control allowed viewing details of...CVE-2024-56348Public exploit4.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of...CVE-2024-541583.5 Low
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp...CVE-2024-541574.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype...CVE-2024-541564.2 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.51866 improper access control allowed listing of project...CVE-2024-541553.7 Low
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in...CVE-2024-541548.0 High
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.51866 unauthenticated database backup download was possible...CVE-2024-541533.1 Low
- jetbrains webstormIn JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via...CVE-2024-525556.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML...CVE-2024-505824.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 improper HTML sanitization could lead to XSS attack via...CVE-2024-505814.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown...CVE-2024-505804.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was...CVE-2024-505794.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile...CVE-2024-505784.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection...CVE-2024-505774.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 stored XSS was possible via vendor URL in App manifestCVE-2024-505764.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget APICVE-2024-505754.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header...CVE-2024-505745.3 Medium
- jetbrains hubIn JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent...CVE-2024-505734.3 Medium
- jetbrains ktorJetBrains Ktor information disclosureCVE-2024-49580Fix available5.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript...CVE-2024-495798.1 High
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project...CVE-2024-489025.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settingsCVE-2024-479513.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settingsCVE-2024-479503.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary...CVE-2024-47949EPSS 32.1%4.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was...CVE-2024-479484.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST APICVE-2024-471614.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports pageCVE-2024-471624.1 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate...CVE-2024-471604.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore...CVE-2024-471594.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possibleCVE-2024-469703.3 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core pluginCVE-2024-438104.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset pageCVE-2024-438093.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault pluginCVE-2024-438083.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds pageCVE-2024-438074.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory...CVE-2024-431147.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space...CVE-2024-418293.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant timeCVE-2024-418282.6 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or...CVE-2024-418277.4 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection pageCVE-2024-418263.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tabCVE-2024-418254.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build...CVE-2024-418246.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile...CVE-2024-398795.0 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App...CVE-2024-398784.1 Medium
- jetbrains hubIn JetBrains Hub before 2024.2.34646 stored XSS via project description was possibleCVE-2024-385073.5 Low
- jetbrains youtrackIn JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the...CVE-2024-385066.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party siteCVE-2024-385055.3 Medium
- Show moreLoading…