Vendor
JetBrains
545 known vulnerabilities.
Products
TeamCity 191
YouTrack 141
IntelliJ IDEA 94
Hub 25
Datalore 19
Ktor 14
WebStorm 10
PyCharm 10
Toolbox App 10
Rider 9
GoLand 9
PhpStorm 8
CLion 7
Junie CLI 4
RubyMine 4
DataGrip 3
RustRover 3
Junie 3
ReSharper 2
DataSpell 2
Junie GitHub Action 2
dotTrace 1
ETW Host Service 1
ReSharper, Rider and dotTrace 1
Kotlin 1
IDE Services 1
Exposed 1
Runtime 1
JetBrains Gateway 1
Aqua 1
MPS 1
TeamCity < 2023.05.4 0
IntelliJ IDEA < 2023.1 0
TeamCity < 2023.05.3 0
TeamCity < 2023.05 0
IntelliJ IDEA < 2022.2.4 0
IntelliJ IDEA < 2022.3 0
TeamCity < 2023.11.1 0
PhpStorm < 2023.1 0
IntelliJ IDEA < 2022.3.1 0
308 results · Clear filters · Feed
-
Medium 6.7
In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping
-
Medium 5.9
In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack
-
Medium 4.6
In JetBrains TeamCity before 2024.12 missing Content-Type header in RemoteBuildLogController response could lead to XSS
-
Medium 5.5
In JetBrains TeamCity before 2024.12 password field value were accessible to users with view settings permission
-
Medium 5.5
In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies
-
Medium 6.3
In JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user roles
-
Medium 4.6
In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page
-
Medium 5.3
In JetBrains TeamCity before 2024.12 improper access control allowed unauthorized users to modify build logs
-
Medium 4.3
In JetBrains TeamCity before 2024.12 build credentials allowed unauthorized viewing of projects
-
Medium 4.3CVE-2024-56348 Public exploit
In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents
-
Medium 4.3
In JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp in Ruby syntax detector
-
Medium 4.2
In JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype pollution attack
-
Medium 6.3
In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installe…
-
Medium 4.6
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML sanitization in markdown elements
-
Medium 4.6
In JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown parsing and custom render…
-
Medium 4.6
In JetBrains YouTrack before 2024.3.47707 improper HTML sanitization could lead to XSS attack via comment tag
-
Medium 4.6
In JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was possible
-
Medium 4.6
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page
-
Medium 4.6
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via vendor URL in App manifest
-
Medium 4.6
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings
-
Medium 4.6
In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API
-
Medium 5.3
In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk fun…
-
Medium 4.3
In JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tokens for unauthorize…
-
Medium 5.3
JetBrains Ktor information disclosure
In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure
-
Medium 5.4
In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to delet…
-
Medium 4.9CVE-2024-47949 EPSS 32%
In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location
-
Medium 4.9
In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups
-
Medium 4.3
In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API
-
Medium 4.1
In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page
-
Medium 4.3
In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a pr…
-
Medium 4.3
In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible
-
Medium 4.6
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin
-
Medium 4.6
In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page
-
Medium 4.6
In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab
-
Medium 6.4
In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific c…
-
Medium 5.0
In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settings
-
Medium 4.1
In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection
-
Medium 6.3
In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for …
-
Medium 5.3
In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site
-
Medium 4.3
In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles