Jetbrains
jetbrains
661 CVEs • 38 products
Products (38)
Click to collapseToggle
Products (38)
Click to collapse
CVEs (661)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
JetBrains TeamCity before 2020.2 was vulnerable to reflected XSS on several pages. |
In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration. |
In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed. |
In JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible, which could lead to code execution. |
In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments. |
In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly. |
In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution. |
In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made. |
In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible. |
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default. |
In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible. |
In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible. |
In JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible. |
In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user. |
In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution. |
In JetBrains Hub before 2020.1.12629, an open redirect was possible. |
In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS. |
In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic. |
JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials. |
2Jetbrains Oracle4Communications Cloud Native Core Network Slice Selection Function Communications Cloud Native Core PolicyCommunications Cloud Native Core Service Communication Proxy+1 moreJun 17, 2026 Feb 3, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions. |