Vulnerabilities (CVE)

Filtered by vendor Jetbrains Subscribe
Total 398 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-38069 1 Jetbrains 1 Intellij Idea 2024-02-28 N/A 3.3 LOW
In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases
CVE-2023-38067 1 Jetbrains 1 Teamcity 2024-02-28 N/A 6.5 MEDIUM
In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent log
CVE-2023-45613 1 Jetbrains 1 Ktor 2024-02-28 N/A 9.1 CRITICAL
In JetBrains Ktor before 2.3.5 server certificates were not verified
CVE-2023-39174 1 Jetbrains 1 Teamcity 2024-02-28 N/A 7.5 HIGH
In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers
CVE-2023-38066 1 Jetbrains 1 Teamcity 2024-02-28 N/A 6.1 MEDIUM
In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads
CVE-2023-38064 1 Jetbrains 1 Teamcity 2024-02-28 N/A 6.5 MEDIUM
In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log
CVE-2023-41248 1 Jetbrains 1 Teamcity 2024-02-28 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration
CVE-2023-42793 1 Jetbrains 1 Teamcity 2024-02-28 N/A 9.8 CRITICAL
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
CVE-2023-38061 1 Jetbrains 1 Teamcity 2024-02-28 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible
CVE-2023-38065 1 Jetbrains 1 Teamcity 2024-02-28 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible
CVE-2023-38068 1 Jetbrains 1 Youtrack 2024-02-28 N/A 7.3 HIGH
In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms
CVE-2023-39261 1 Jetbrains 1 Intellij Idea 2024-02-28 N/A 7.8 HIGH
In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions
CVE-2023-38063 1 Jetbrains 1 Teamcity 2024-02-28 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible
CVE-2023-43566 1 Jetbrains 1 Teamcity 2024-02-28 N/A 5.4 MEDIUM
In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration
CVE-2023-39173 1 Jetbrains 1 Teamcity 2024-02-28 N/A 8.8 HIGH
In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access
CVE-2023-45612 1 Jetbrains 1 Ktor 2024-02-28 N/A 9.8 CRITICAL
In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE
CVE-2023-39175 1 Jetbrains 1 Teamcity 2024-02-28 N/A 6.1 MEDIUM
In JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possible
CVE-2023-41250 1 Jetbrains 1 Teamcity 2024-02-28 N/A 6.1 MEDIUM
In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration
CVE-2023-41249 1 Jetbrains 1 Teamcity 2024-02-28 N/A 6.1 MEDIUM
In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step
CVE-2023-38062 1 Jetbrains 1 Teamcity 2024-02-28 N/A 6.5 MEDIUM
In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurations