Jetbrains
jetbrains
661 CVEs • 38 products
Products (38)
Click to collapseToggle
Products (38)
Click to collapse
CVEs (661)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 stored XSS in the classic build log was possible |
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 stored XSS in the classic project overview was possible |
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible |
In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server |
In JetBrains TeamCity before 2026.1.3
2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible |
In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration |
In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications |
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs |
In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes |
In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible |
In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments |
In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues |
In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links |
In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible |
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues |
In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible |
In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials |
In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments |
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature |
In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action |