CVEs published August 8, 2020
15 CVEs were published on August 8, 2020: 0 critical, 0 high.
- Published
- 15
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 15
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 15
- CVE-2019-19704In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.
- CVE-2020-15830JetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI.
- CVE-2020-15831JetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI.
- CVE-2020-15828In JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user without appropriate permissions.
- CVE-2020-15829In JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs.
- CVE-2020-15825In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges.
- CVE-2020-15826In JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have.
- CVE-2020-15827In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file.
- CVE-2020-15824In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue.
- CVE-2020-15823JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component.
- CVE-2020-15821In JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article draft.
- CVE-2020-15820In JetBrains YouTrack before 2020.2.6881, the markdown parser could disclose hidden file existence.
- CVE-2020-15819JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports.
- CVE-2020-15817In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues.
- CVE-2020-15818In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence.