Vulnerabilidades en JetBrains
545 resultadosCVE-2025-68165MEDIUMIn JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setupEPSS 4.2%CVE-2025-24459MEDIUMIn JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection pageEPSS 2.9%CVE-2025-47851MEDIUMIn JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possibleEPSS 2.8%CVE-2017-8316—IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicEPSS 2.3%CVE-2022-36321MEDIUMIn JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in some casesEPSS 1.9%CVE-2023-39174MEDIUMIn JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackersEPSS 1.7%CVE-2022-29927MEDIUMIn JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possibleEPSS 1.6%CVE-2023-38062MEDIUMIn JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurationsEPSS 1.4%CVE-2024-47950LOWIn JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settingsEPSS 1.4%CVE-2024-47951LOWIn JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settingsEPSS 1.4%CVE-2022-28648MEDIUMIn JetBrains YouTrack before 2022.1.43563 HTML code from the issue description was being renderedEPSS 1.4%CVE-2023-34223MEDIUMIn JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some casesEPSS 1.3%CVE-2026-75047MEDIUMIn JetBrains YouTrack before 2026.2.18177 doS attack was possible via a decompression bomb in the import endpointEPSS 1.2%CVE-2025-52879MEDIUMIn JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possibleEPSS 1.2%CVE-2026-75050HIGHIn JetBrains YouTrack before 2026.1.13901,
2026.2.17950 doS attack was possible via crafted type parametersEPSS 1.1%CVE-2023-34229MEDIUMIn JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possibleEPSS 1.0%CVE-2023-43566LOWIn JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configurationEPSS 1.0%CVE-2025-31139MEDIUMIn JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build logEPSS 1.0%CVE-2023-34222MEDIUMIn JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possibleEPSS 1.0%CVE-2023-39175MEDIUMIn JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possibleEPSS 1.0%