Vulnerabilidades en JetBrains
545 resultadosCVE-2025-54533MEDIUMIn JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configurationEPSS 0.3%CVE-2026-64810MEDIUMIn JetBrains IntelliJ IDEA before 2026.2 hTML injection was possible in an IDE notification, allowing silent user activity trackingEPSS 0.3%CVE-2026-123291MEDIUMIn JetBrains Datalore before 2026.4 improper owner validation allowed reading another workspace's issues and runs notebookEPSS 0.3%CVE-2026-123851MEDIUMIn JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded charactersEPSS 0.2%CVE-2026-49370LOWIn JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requestsEPSS 0.2%CVE-2026-100279MEDIUMIn JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentialsEPSS 0.2%CVE-2025-57728MEDIUMIn JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden filesEPSS 0.2%CVE-2026-123334LOWIn JetBrains YouTrack before 2026.2.19562 project admins of a related project could delete VCS integrations owned by another projectEPSS 0.2%CVE-2026-86491LOWIn JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploadsEPSS 0.2%CVE-2025-68164LOWIn JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection testEPSS 0.2%CVE-2026-75053MEDIUMIn JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpointEPSS 0.2%CVE-2024-56356MEDIUMIn JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attackEPSS 0.2%CVE-2024-38507LOWIn JetBrains Hub before 2024.2.34646 stored XSS via project description was possibleEPSS 0.2%CVE-2026-57922LOWIn JetBrains YouTrack before 2026.2.16593 project settings disclosure via the MCP was possibleEPSS 0.2%CVE-2024-43808LOWIn JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault pluginEPSS 0.2%CVE-2025-64685HIGHIn JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosureEPSS 0.2%CVE-2026-100278MEDIUMIn JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' commentsEPSS 0.2%CVE-2024-29880MEDIUMIn JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running the agent processEPSS 0.2%CVE-2022-29821MEDIUMIn JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possibleEPSS 0.2%CVE-2022-29819MEDIUMIn JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possibleEPSS 0.2%