Total 582 security vulnerabilities recorded for jetbrains software and firmware.
In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243....
In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows...
In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload...
In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition...
In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243....
In JetBrains IDE Services before 2025.5.0.1086, 2025.4.2.2164 users without appropriate permissions could assign high-privileged role for themselves...
In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files...
In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email content...
In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership...
In JetBrains YouTrack before 2025.2.92387 stored XSS was possible via Mermaid diagram content...
In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature...
In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server start...
In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden files...
In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference...
In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command...
In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshots...
In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint...
In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms...
In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page...
In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration...
In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies...
In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows...
In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions...
In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration...