Jetbrains: Security Vulnerabilities
JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page.
CVSS Score
8.8
EPSS Score
0.008
Published
2019-10-02
In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page.
CVSS Score
6.1
EPSS Score
0.011
Published
2019-10-02
JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability.
CVSS Score
7.3
EPSS Score
0.004
Published
2019-10-02
JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injection.
CVSS Score
9.8
EPSS Score
0.022
Published
2019-10-02
UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials.
CVSS Score
5.3
EPSS Score
0.007
Published
2019-10-02
JetBrains YouTrack before 2019.2.53938 was using incorrect settings, allowing a user without necessary permissions to get other project names.
CVSS Score
4.3
EPSS Score
0.01
Published
2019-10-02
JetBrains PyCharm before 2019.2 was allocating a buffer of unknown size for one of the connection processes. In a very specific situation, it could lead to a remote invocation of an OOM error message because of Uncontrolled Memory Allocation.
CVSS Score
7.5
EPSS Score
0.019
Published
2019-10-02
JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection.
CVSS Score
5.9
EPSS Score
0.007
Published
2019-10-02
Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity versions before 2018.2.5 and UpSource versions before 2018.2 build 1293.
CVSS Score
5.3
EPSS Score
0.009
Published
2019-10-02
In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.
CVSS Score
9.8
EPSS Score
0.018
Published
2019-10-02