Vulnerabilidades en JetBrains

545 resultados
CVE-2024-50577MEDIUMIn JetBrains YouTrack before 2024.3.47707 stored XSS was possible via Angular template injection in Hub settingsEPSS 0.3%CVE-2026-59794HIGHIn JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported dataEPSS 0.3%CVE-2022-28651HIGHIn JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fieldsEPSS 0.3%CVE-2024-50579MEDIUMIn JetBrains YouTrack before 2024.3.47707 reflected XSS due to insecure link sanitization was possibleEPSS 0.3%CVE-2026-108474CRITICALIn JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functionsEPSS 0.3%CVE-2026-75048HIGHIn JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possibleEPSS 0.3%CVE-2026-106218HIGHIn JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possibleEPSS 0.3%CVE-2023-50870MEDIUMIn JetBrains TeamCity before 2023.11.1 a CSRF on login was possibleEPSS 0.3%CVE-2024-50576MEDIUMIn JetBrains YouTrack before 2024.3.47707 stored XSS was possible via vendor URL in App manifestEPSS 0.3%CVE-2024-50580MEDIUMIn JetBrains YouTrack before 2024.3.47707 multiple XSS were possible due to insecure markdown parsing and custom rendering ruleEPSS 0.3%CVE-2024-50581MEDIUMIn JetBrains YouTrack before 2024.3.47707 improper HTML sanitization could lead to XSS attack via comment tagEPSS 0.3%CVE-2024-50578MEDIUMIn JetBrains YouTrack before 2024.3.47707 stored XSS was possible via sprint value on agile boards pageEPSS 0.3%CVE-2025-24461MEDIUMIn JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpointEPSS 0.3%CVE-2024-50582MEDIUMIn JetBrains YouTrack before 2024.3.47707 stored XSS was possible due to improper HTML sanitization in markdown elementsEPSS 0.3%CVE-2025-54527MEDIUMIn JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allowEPSS 0.3%CVE-2025-53959HIGHIn JetBrains YouTrack before 2025.2.86069, 2024.3.85077, 2025.1.86199 email spoofing via an administrative API was possibleEPSS 0.3%CVE-2024-54158LOWIn JetBrains YouTrack before 2024.3.52635 potential spoofing attack was possible via lack of Punycode encodingEPSS 0.3%CVE-2024-24941MEDIUMIn JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URLEPSS 0.3%CVE-2024-38506MEDIUMIn JetBrains YouTrack before 2024.2.34646 user without appropriate permissions could enable the auto-attach option for workflowsEPSS 0.3%CVE-2024-56353MEDIUMIn JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookiesEPSS 0.3%