# CVEs published 2020-08-08

15 CVEs were published on August 8, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2019-19704](https://cve.now/CVE-2019-19704.md): In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm. (no CVSS)
- [CVE-2020-15830](https://cve.now/CVE-2020-15830.md): JetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI. (no CVSS)
- [CVE-2020-15831](https://cve.now/CVE-2020-15831.md): JetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI. (no CVSS)
- [CVE-2020-15828](https://cve.now/CVE-2020-15828.md): In JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user without appropriate permissions. (no CVSS)
- [CVE-2020-15829](https://cve.now/CVE-2020-15829.md): In JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs. (no CVSS)
- [CVE-2020-15825](https://cve.now/CVE-2020-15825.md): In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges. (no CVSS)
- [CVE-2020-15826](https://cve.now/CVE-2020-15826.md): In JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have. (no CVSS)
- [CVE-2020-15827](https://cve.now/CVE-2020-15827.md): In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file. (no CVSS)
- [CVE-2020-15824](https://cve.now/CVE-2020-15824.md): In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. (no CVSS)
- [CVE-2020-15823](https://cve.now/CVE-2020-15823.md): JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component. (no CVSS)
- [CVE-2020-15821](https://cve.now/CVE-2020-15821.md): In JetBrains YouTrack before 2020.2.6881, a user without permission is able to create an article draft. (no CVSS)
- [CVE-2020-15820](https://cve.now/CVE-2020-15820.md): In JetBrains YouTrack before 2020.2.6881, the markdown parser could disclose hidden file existence. (no CVSS)
- [CVE-2020-15819](https://cve.now/CVE-2020-15819.md): JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports. (no CVSS)
- [CVE-2020-15817](https://cve.now/CVE-2020-15817.md): In JetBrains YouTrack before 2020.1.1331, an external user could execute commands against arbitrary issues. (no CVSS)
- [CVE-2020-15818](https://cve.now/CVE-2020-15818.md): In JetBrains YouTrack before 2020.2.8527, the subtasks workflow could disclose issue existence. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-08-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.