Jetbrains vulnerabilities, page 2
696 vulnerabilities
Known vulnerabilities in Jetbrains products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 42 products.
CVE-2021-31915jetbrainsteamcity
EPSS score3.21%
In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible.CVE-2021-31911jetbrainsteamcityEPSS score0.75%
In JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages.CVE-2021-31899jetbrainscode_with_meEPSS score1.26%
In JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could execute code in read-only mode.CVE-2021-31902jetbrainsyoutrackEPSS score1.19%
In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly.CVE-2021-31901jetbrainshubEPSS score0.86%
In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group.CVE-2021-31897jetbrainswebstormEPSS score1.54%
In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects.CVE-2021-31898jetbrainswebstormEPSS score0.63%
In JetBrains WebStorm before 2021.1, HTTP requests were used instead of HTTPS.CVE-2021-31909jetbrainsteamcityEPSS score3.23%
In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible.CVE-2021-36209jetbrainshubEPSS score1.03%
In JetBrains Hub before 2021.1.13389, account takeover was possible during password reset.CVE-2021-25774jetbrainsteamcityEPSS score0.66%
In JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of another user.CVE-2021-25758jetbrainsintellij_ideaEPSS score0.96%
In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution.CVE-2021-25771jetbrainsyoutrackEPSS score1.55%
In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed.CVE-2021-25756jetbrainsintellij_ideaEPSS score1.30%
In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS.CVE-2021-25777jetbrainsteamcityEPSS score0.73%
In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly.CVE-2021-25762jetbrainsktorEPSS score0.81%
In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible.CVE-2021-25768jetbrainsyoutrackEPSS score1.18%
In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly.CVE-2021-25757jetbrainshubEPSS score0.64%
In JetBrains Hub before 2020.1.12629, an open redirect was possible.CVE-2021-25759jetbrainshubEPSS score0.73%
In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user.CVE-2021-25776jetbrainsteamcityEPSS score1.08%
In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters.CVE-2021-25767jetbrainsyoutrackEPSS score2.56%
In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution.