Jetbrains
jetbrains
564 CVEs • 38 products
Products (38)
Click to collapseToggle
Products (38)
Click to collapse
CVEs (564)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
JetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI. |
JetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI. |
In JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs. |
In JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user without appropriate permissions. |
In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file. |
In JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have. |
In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges. |
2Jetbrains Oracle3Banking Extensibility Workbench Communications Cloud Native Core PolicyKotlinNov 21, 2024 Aug 8, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation vulnerability due to kotlin-main-kts cached scripts in the sy...Show more |
JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component. |
In JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article draft. |
In JetBrains YouTrack before 2020.2.6881, the markdown parser could disclose hidden file existence. |
JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports. |
In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence. |
In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues. |
In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm. |
In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters used in a project. The issue was resolved in 2019.2.2. |
In JetBrains Space through 2020-04-22, the password authentication implementation was insecure. |
In JetBrains Space through 2020-04-22, the session timeout period was configured improperly. |
JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue. |
In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators. |