Total 582 security vulnerabilities recorded for jetbrains software and firmware.
In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API...
In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page...
In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible...
In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project...
In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible...
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin...
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page...
In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin...
In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page...
In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions...
In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection...
In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time...
In JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or expiration...
In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page...
In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab...
In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific cases...
In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settings...
In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection...
In JetBrains Hub before 2024.2.34646 stored XSS via project description was possible...
In JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflows...
In JetBrains YouTrack before 2024.2.34646 user access token was sent to the third-party site...
In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles...
GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023...
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases...