JetBrains vulnerabilities
545 CVEs and advisories name JetBrains as an affected vendor, 4 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-42793In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
- CVE-2023-41250In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration
- CVE-2023-41249In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step
- CVE-2023-41248In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration
- CVE-2023-39261In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions
- CVE-2023-39175In JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possible
- CVE-2023-39174In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers
- CVE-2023-39173In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access
- CVE-2023-38069In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases
- CVE-2023-38068In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms
- CVE-2023-38067In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent log
- CVE-2023-38066In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads
- CVE-2023-38065In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible
- CVE-2023-38064In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log
- CVE-2023-38063In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible
- CVE-2023-38062In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurations
- CVE-2023-38061In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible
- CVE-2015-1313JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request da
- CVE-2023-35054In JetBrains YouTrack before 2023.1.10518 stored XSS in a Markdown-rendering engine was possible
- CVE-2023-35053In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms
- CVE-2023-34339In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message
- CVE-2023-34229In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible
- CVE-2023-34228In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actions
- CVE-2023-34227In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks
- CVE-2023-34226In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible
- CVE-2023-34225In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible
- CVE-2023-34224In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible
- CVE-2023-34223In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases
- CVE-2023-34222In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible
- CVE-2023-34221In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible