Vendor
JetBrains
545 known vulnerabilities.
Products
TeamCity 191
YouTrack 141
IntelliJ IDEA 94
Hub 25
Datalore 19
Ktor 14
WebStorm 10
PyCharm 10
Toolbox App 10
Rider 9
GoLand 9
PhpStorm 8
CLion 7
Junie CLI 4
RubyMine 4
DataGrip 3
RustRover 3
Junie 3
ReSharper 2
DataSpell 2
Junie GitHub Action 2
dotTrace 1
ETW Host Service 1
ReSharper, Rider and dotTrace 1
Kotlin 1
IDE Services 1
Exposed 1
Runtime 1
JetBrains Gateway 1
Aqua 1
MPS 1
TeamCity < 2023.05.4 0
IntelliJ IDEA < 2023.1 0
TeamCity < 2023.05.3 0
TeamCity < 2023.05 0
IntelliJ IDEA < 2022.2.4 0
IntelliJ IDEA < 2022.3 0
TeamCity < 2023.11.1 0
PhpStorm < 2023.1 0
IntelliJ IDEA < 2022.3.1 0
308 results · Clear filters · Feed
-
Medium 4.3
In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible
-
Medium 4.3
In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed
-
Medium 6.8
-
Medium 4.6
In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration
-
Medium 4.6CVE-2023-41249 EPSS 56%
In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step
-
Medium 5.2
In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions
-
Medium 4.6
In JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possible
-
Medium 4.3
In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers
-
Medium 5.4
In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access
-
Medium 6.5
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms
-
Medium 4.3
In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent log
-
Medium 4.6
In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads
-
Medium 4.6
In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible
-
Medium 4.3
In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log
-
Medium 4.6
In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible
-
Medium 4.3
In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite …
-
Medium 4.6
In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible
-
Medium 4.6
In JetBrains YouTrack before 2023.1.10518 stored XSS in a Markdown-rendering engine was possible
-
Medium 4.6
In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible
-
Medium 5.3
In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive accoun…
-
Medium 4.6CVE-2023-34225 EPSS 61%
In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible
-
Medium 4.6
In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible
-
Medium 5.3
In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks
-
Medium 4.3
In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some …
-
Medium 4.8
In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible
-
Medium 4.6
In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible
-
Medium 4.6
In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible
-
Medium 4.3
In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit B…
-
Medium 4.6CVE-2023-34220 EPSS 61%
In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible
-
Medium 5.2
In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible
-
Medium 4.1
In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing
-
Medium 6.1
In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built…
-
Medium 5.2
In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.
-
Medium 4.5
In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust …
-
Medium 5.5
In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown pr…
-
Medium 4.6CVE-2022-48429 Public exploit
In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible
-
Medium 4.6CVE-2022-48428 EPSS 68%
In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible
-
Medium 4.6
In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible
-
Medium 4.6
In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible
-
Medium 5.4
In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process.