Vulnerabilidades en JetBrains
545 resultadosCVE-2022-29814MEDIUMIn JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possibleEPSS 0.2%CVE-2026-49374HIGHIn JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parametersEPSS 0.2%CVE-2026-25847HIGHIn JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupyter viewer page was possibleEPSS 0.2%CVE-2025-43014MEDIUMIn JetBrains Toolbox App before 2.6 the SSH plugin established connections without sufficient user confirmationEPSS 0.2%CVE-2026-123309MEDIUMIn JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 stored XSS was possible on the built-in web server via Markdown previewEPSS 0.2%CVE-2022-46826MEDIUMIn JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulneraEPSS 0.2%CVE-2026-59791LOWIn JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possibleEPSS 0.2%CVE-2026-100268HIGHIn JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templatesEPSS 0.2%CVE-2025-64773LOWIn JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limitEPSS 0.2%CVE-2026-100266HIGHIn JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted adEPSS 0.2%CVE-2026-100264LOWIn JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server hostEPSS 0.2%CVE-2026-123283MEDIUMIn JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered accountEPSS 0.2%CVE-2026-100271LOWIn JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authenticated users to access information from EPSS 0.2%CVE-2022-47895MEDIUMIn JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files.EPSS 0.2%CVE-2026-103493HIGHIn JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possibleEPSS 0.2%CVE-2026-49385MEDIUMIn JetBrains YouTrack before 2026.1.13570 improper access control allowed low-privileged users to modify service accountsEPSS 0.2%CVE-2024-50573MEDIUMIn JetBrains Hub before 2024.3.47707 improper access control allowed users to generate permanent tokens for unauthorized servicesEPSS 0.2%CVE-2026-123314LOWIn JetBrains IntelliJ IDEA before 2026.3,
2026.2.4 xXE attack was possible via an XML response to an HTTP Client requestEPSS 0.2%CVE-2026-123332MEDIUMIn JetBrains YouTrack before 2026.2.19562 missing authorization allowed Project Admin to manage VCS hosting server configurationsEPSS 0.2%CVE-2022-29815MEDIUMIn JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possibleEPSS 0.2%