Jetbrains: Security Vulnerabilities
In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file.
CVSS Score
7.5
EPSS Score
0.007
Published
2020-08-08
In JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user without appropriate permissions.
CVSS Score
6.5
EPSS Score
0.011
Published
2020-08-08
In JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs.
CVSS Score
5.3
EPSS Score
0.009
Published
2020-08-08
JetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI.
CVSS Score
6.1
EPSS Score
0.008
Published
2020-08-08
JetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI.
CVSS Score
6.1
EPSS Score
0.006
Published
2020-08-08
In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.
CVSS Score
7.5
EPSS Score
0.013
Published
2020-08-08
In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues.
CVSS Score
8.8
EPSS Score
0.02
Published
2020-08-08
In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence.
CVSS Score
5.3
EPSS Score
0.014
Published
2020-08-08
JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports.
CVSS Score
5.3
EPSS Score
0.014
Published
2020-08-08
In JetBrains Space through 2020-04-22, the session timeout period was configured improperly.
CVSS Score
7.5
EPSS Score
0.008
Published
2020-04-22