Jetbrains: Security Vulnerabilities
In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS.
CVSS Score
6.1
EPSS Score
0.0
Published
2020-01-30
In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups.
CVSS Score
5.3
EPSS Score
0.0
Published
2020-01-30
JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description.
CVSS Score
6.1
EPSS Score
0.0
Published
2020-01-30
In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS.
CVSS Score
7.4
EPSS Score
0.0
Published
2020-01-30
Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network.
CVSS Score
7.5
EPSS Score
0.0
Published
2020-01-30
In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3.
CVSS Score
7.5
EPSS Score
0.0
Published
2020-01-30
In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages.
CVSS Score
4.3
EPSS Score
0.0
Published
2020-01-30
In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI.
CVSS Score
7.5
EPSS Score
0.0
Published
2020-01-30
In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator.
CVSS Score
5.4
EPSS Score
0.0
Published
2020-01-27
JetBrains IDETalk plugin before version 193.4099.10 allows XXE
CVSS Score
7.5
EPSS Score
0.0
Published
2020-01-15