Jetbrains: Security Vulnerabilities
In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible
CVSS Score
4.6
EPSS Score
0.001
Published
2023-03-27
In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible
CVSS Score
4.6
EPSS Score
0.0
Published
2023-03-27
In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.
CVSS Score
5.2
EPSS Score
0.0
Published
2023-02-23
In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.
CVSS Score
5.4
EPSS Score
0.045
Published
2023-02-23
In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process.
CVSS Score
5.4
EPSS Score
0.001
Published
2023-02-23
In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files.
CVSS Score
4.7
EPSS Score
0.0
Published
2022-12-22
In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.
CVSS Score
5.0
EPSS Score
0.0
Published
2022-12-22
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability.
CVSS Score
6.2
EPSS Score
0.0
Published
2022-12-08
In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.
CVSS Score
3.9
EPSS Score
0.0
Published
2022-12-08
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.
CVSS Score
5.2
EPSS Score
0.0
Published
2022-12-08