Total 582 security vulnerabilities recorded for jetbrains software and firmware.
In JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encoding...
In JetBrains YouTrack before 2024.3.52635 potential ReDoS was possible due to vulnerable RegExp in Ruby syntax detector...
In JetBrains YouTrack before 2024.3.52635 multiple merge functions were vulnerable to prototype pollution attack...
In JetBrains YouTrack before 2024.3.51866 improper access control allowed listing of project names during app import without authentication...
In JetBrains YouTrack before 2024.3.51866 system takeover was possible through path traversal in plugin sandbox...
In JetBrains YouTrack before 2024.3.51866 unauthenticated database backup download was possible via vulnerable query parameter...
In JetBrains WebStorm before 2024.3 code execution in Untrusted Project mode was possible via type definitions installer script...
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML sanitization in markdown elements...
In JetBrains YouTrack before 2024.3.47707 improper HTML sanitization could lead to XSS attack via comment tag...
In JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown parsing and custom rendering rule...
In JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was possible...
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards page...
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settings...
In JetBrains YouTrack before 2024.3.47707 stored XSS was possible via vendor URL in App manifest...
In JetBrains YouTrack before 2024.3.47707 reflected XSS was possible in Widget API...
In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...
In JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tokens for unauthorized services...
In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure...
In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript execution and unauthorized API requests...
In JetBrains YouTrack before 2024.3.46677 improper access control allowed users with project update permission to delete applications via API...
In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings...
In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings...
In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location...
In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups...