Browse CVEs

MEDIUM 6.1 CVE-2023-38066 In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads Teamcity 2023.05.1+ Fix from $1,6002023-07-12 MEDIUM 5.4 CVE-2023-38061 In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible Teamcity 2023.05.1+ Fix from $1,6002023-07-12 MEDIUM 5.4 CVE-2023-38063 In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible Teamcity 2023.05.1+ Fix from $1,6002023-07-12 MEDIUM 5.4 CVE-2023-38065 In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible Teamcity 2023.05.1+ Fix from $1,6002023-07-12 MEDIUM 6.5 CVE-2015-1313 JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be… Teamcity 9.0.2+ Fix from $1,6002023-06-29 HIGH 7.5 CVE-2023-35053 In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms Youtrack 2023.1.10518+ Fix from $1,9502023-06-12 MEDIUM 5.4 CVE-2023-35054 In JetBrains YouTrack before 2023.1.10518 stored XSS in a Markdown-rendering engine was possible Youtrack 2023.1.10518+ Fix from $1,6002023-06-12 CRITICAL 9.8 CVE-2023-34218 In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible Teamcity 2023.05+ Fix from $2,3002023-05-31 HIGH 7.5 CVE-2023-34227 In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks Teamcity 2023.05+ Fix from $1,9502023-05-31 MEDIUM 6.5 CVE-2023-34228 In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actions Teamcity 2023.05+ Fix from $1,6002023-05-31 MEDIUM 6.1 CVE-2023-34222 In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible Teamcity 2023.05+ Fix from $1,6002023-05-31 MEDIUM 6.1 CVE-2023-34226 In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible Teamcity 2023.05+ Fix from $1,6002023-05-31 MEDIUM 5.4 CVE-2023-34220EPSS 61% In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible Teamcity 2023.05+ Fix from $1,6002023-05-31 MEDIUM 5.4 CVE-2023-34221 In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible Teamcity 2023.05+ Fix from $1,6002023-05-31 MEDIUM 5.4 CVE-2023-34225EPSS 61% In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible Teamcity 2023.05+ Fix from $1,6002023-05-31 MEDIUM 5.4 CVE-2023-34229 In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible Teamcity 2023.05+ Fix from $1,6002023-05-31 MEDIUM 5.3 CVE-2023-34223 In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases Teamcity 2023.05+ Fix from $1,6002023-05-31 HIGH 7.8 CVE-2022-48481 In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible Toolbox 1.28+ Fix from $1,9502023-04-28 CRITICAL 9.8 CVE-2022-48477 In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing Hub 2023.1.15725+ Fix from $2,3002023-04-24 HIGH 7.5 CVE-2022-48476 In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible Ktor 2.3.0+ Fix from $1,9502023-04-24 HIGH 8.8 CVE-2022-48432 In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed. Intellij Idea 2023.1+ Fix from $1,9502023-03-29 HIGH 7.5 CVE-2022-48433 In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server. Intellij Idea 2023.1+ Fix from $1,9502023-03-29 HIGH 7.8 CVE-2022-48431 In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation. Intellij Idea 2023.1+ Fix from $1,9502023-03-29 HIGH 7.5 CVE-2022-48430 In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview. Intellij Idea 2023.1+ Fix from $1,9502023-03-29 MEDIUM 5.4 CVE-2022-48427 In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible Teamcity 2022.10.3+ Fix from $1,6002023-03-27 MEDIUM 5.4 CVE-2022-48428EPSS 68% In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible Teamcity 2022.10.3+ Fix from $1,6002023-03-27 MEDIUM 5.4 CVE-2022-48426 In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible Teamcity Mitigation only Fix from $1,6002023-03-27 MEDIUM 5.4 CVE-2022-48429 In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible Hub 2022.1.15583 / 2022.2.15572+ Fix from $1,6002023-03-27 CRITICAL 9.8 CVE-2022-48342 In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents. Teamcity 2022.10.2+ Fix from $2,3002023-02-23 MEDIUM 6.1 CVE-2022-48343EPSS 59% In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process. Teamcity 2022.10.2+ Fix from $1,6002023-02-23