Vendor
JetBrains
545 known vulnerabilities.
Products
TeamCity 191
YouTrack 141
IntelliJ IDEA 94
Hub 25
Datalore 19
Ktor 14
WebStorm 10
PyCharm 10
Toolbox App 10
Rider 9
GoLand 9
PhpStorm 8
CLion 7
Junie CLI 4
RubyMine 4
DataGrip 3
RustRover 3
Junie 3
ReSharper 2
DataSpell 2
Junie GitHub Action 2
dotTrace 1
ETW Host Service 1
ReSharper, Rider and dotTrace 1
Kotlin 1
IDE Services 1
Exposed 1
Runtime 1
JetBrains Gateway 1
Aqua 1
MPS 1
TeamCity < 2023.05.4 0
IntelliJ IDEA < 2023.1 0
TeamCity < 2023.05.3 0
TeamCity < 2023.05 0
IntelliJ IDEA < 2022.2.4 0
IntelliJ IDEA < 2022.3 0
TeamCity < 2023.11.1 0
PhpStorm < 2023.1 0
IntelliJ IDEA < 2022.3.1 0
545 results · Feed
-
Medium 5.3
In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation
-
Medium 4.6
In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible
-
Medium 4.3
In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed
-
Medium 4.6
In JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible
-
Medium 6.3
In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin…
-
Medium 4.3
In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible
-
Medium 4.3
In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed
-
Medium 6.8
-
High 8.6CVE-2023-45612 Public exploit
In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE
-
Critical 9.8
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
KEV Oct 4, 2023 -
Low 3.5
In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration
-
Medium 4.6
In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration
-
Low 3.5
In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration
-
Medium 4.6CVE-2023-41249 EPSS 56%
In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step
-
Medium 5.2
In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions
-
Medium 4.6
In JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possible
-
Medium 4.3
In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers
-
Medium 5.4
In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access
-
Low 3.3
In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases
-
Medium 6.5
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms
-
Medium 4.3
In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent log
-
Medium 4.6
In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads
-
Medium 4.6
In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible
-
Medium 4.3
In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log
-
Medium 4.6
In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible
-
Medium 4.3
In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite …
-
Medium 4.6
In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible
-
Unscored —
JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because th…
-
Medium 4.6
In JetBrains YouTrack before 2023.1.10518 stored XSS in a Markdown-rendering engine was possible
-
High 7.5
In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms
-
Low 3.3
In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message
-
Medium 4.6
In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible
-
Medium 5.3
In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive accoun…
-
Medium 4.6CVE-2023-34225 EPSS 61%
In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible
-
Medium 4.6
In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible
-
Medium 5.3
In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks
-
Medium 4.3
In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some …
-
Medium 4.8
In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible
-
Medium 4.6
In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible
-
Medium 4.6
In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible