Jetbrains: Security Vulnerabilities
In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.
CVSS Score
5.3
EPSS Score
0.011
Published
2019-10-31
In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages.
CVSS Score
4.3
EPSS Score
0.008
Published
2019-10-31
In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission.
CVSS Score
5.3
EPSS Score
0.011
Published
2019-10-31
In JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through password recovery.
CVSS Score
5.3
EPSS Score
0.009
Published
2019-10-31
JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution.
CVSS Score
5.3
EPSS Score
0.004
Published
2019-10-31
JetBrains MPS before 2019.2.2 exposed listening ports to the network.
CVSS Score
5.3
EPSS Score
0.009
Published
2019-10-31
In JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a deleted build configuration under some circumstances.
CVSS Score
5.3
EPSS Score
0.009
Published
2019-10-31
In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution.
CVSS Score
9.8
EPSS Score
0.035
Published
2019-10-31
An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could execute any command on the server machine. The issue was fixed in TeamCity 2018.2.5 and 2019.1.
CVSS Score
7.2
EPSS Score
0.016
Published
2019-10-02
An issue was discovered in JetBrains TeamCity 2018.2.4. It had several XSS vulnerabilities on the settings pages. The issues were fixed in TeamCity 2019.1.
CVSS Score
6.1
EPSS Score
0.008
Published
2019-10-02