Skip to contentJetbrains vulnerabilities
Newest
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak...CVE-2025-545355.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset pageCVE-2025-545344.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings...CVE-2025-545334.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings...CVE-2025-545324.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on WindowsCVE-2025-545317.7 High
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory...CVE-2025-545307.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integrationCVE-2025-545293.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flowCVE-2025-545285.4 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2025.2.86935,
2025.2.87167,
2025.3.87341,
2025.3.87344 improper...CVE-2025-545276.1 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2025.2.86069,
2024.3.85077,
2025.1.86199 email spoofing via an...CVE-2025-539597.6 High
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possibleCVE-2025-528794.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper...CVE-2025-528784.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possibleCVE-2025-52877EPSS 37.0%4.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possibleCVE-2025-52876EPSS 38.6%5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possibleCVE-2025-528755.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root pageCVE-2025-478544.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possibleCVE-2025-478534.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possibleCVE-2025-478524.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possibleCVE-2025-478514.8 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2025.1.74704 restricted attachments could become visible after issue...CVE-2025-478504.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2025.1.76253 deletion of issues was possible due to missing...CVE-2025-483917.7 High
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tabCVE-2025-46618EPSS 63.0%3.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was...CVE-2025-464334.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logsCVE-2025-464324.3 Medium
- jetbrains riderIn JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite...CVE-2025-430165.4 Medium
- jetbrains rubymineIn JetBrains RubyMine before 2025.1 remote Interpreter overwrote ports to listen on all interfacesCVE-2025-430158.3 High
- jetbrains toolbox, toolbox app +1 moreIn JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient...CVE-2025-430146.1 Medium
- jetbrains toolbox, toolbox app +1 moreIn JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication...CVE-2025-430136.9 Medium
- jetbrains toolbox, toolbox app +1 moreIn JetBrains Toolbox App before 2.6 command injection in SSH plugin was possibleCVE-2025-430128.3 High
- jetbrains toolbox, toolbox app +1 moreIn JetBrains Toolbox App before 2.6 host key verification was missing in SSH pluginCVE-2025-429214.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log fileCVE-2025-320543.3 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles...CVE-2025-311412.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles pageCVE-2025-31140EPSS 28.0%4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build logCVE-2025-311394.3 Medium
- jetbrains golandIn JetBrains GoLand before 2025.1 an XXE during debugging was possibleCVE-2025-299324.1 Medium
- jetbrains ktorIn JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possibleCVE-2025-299045.3 Medium
- jetbrains runtimeIn JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure...CVE-2025-299035.2 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose...CVE-2025-264927.7 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.2 several DOM-based XSS were possible on the Code Inspection...CVE-2025-264934.6 Medium
- jetbrains dottrace, etw host service, resharper +1 more +3 moreIn JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8,...CVE-2025-233857.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper...CVE-2025-244616.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in...CVE-2025-244604.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection pageCVE-2025-244594.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and...CVE-2025-244587.1 High
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logsCVE-2025-244575.5 Medium
- jetbrains hubIn JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication...CVE-2025-244566.7 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE...CVE-2024-563565.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 missing Content-Type header in RemoteBuildLogController...CVE-2024-563554.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 password field value were accessible to users with view...CVE-2024-563545.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookiesCVE-2024-563535.5 Medium
- Show moreLoading…