Jetbrains
jetbrains
602 CVEs • 38 products
Products (38)
Click to collapseToggle
Products (38)
Click to collapse
CVEs (602)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
In JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tokens for unauthorized services |
In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure |
In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript execution and unauthorized API requests |
In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to delete applications via API |
In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings |
In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings |
In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location |
In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups |
In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API |
In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page |
In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible |
In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project |
In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible |
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin |
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page |
In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin |
In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page |
In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions |
In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection |
In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time |