Vulnerabilidades en JetBrains
545 resultadosCVE-2025-67740LOWIn JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadataEPSS 0.2%CVE-2025-24458HIGHIn JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integrationEPSS 0.2%CVE-2022-29813MEDIUMIn JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possibleEPSS 0.2%CVE-2026-49378MEDIUMIn JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletionEPSS 0.2%CVE-2025-64683MEDIUMIn JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users APIEPSS 0.2%CVE-2025-58335MEDIUMIn JetBrains Junie before 252.284.66,
251.284.66,
243.284.66,
252.284.61,
251.284.61,
243.284.61,
252.284.50,
252.284.54,
251.284.54,
251.28EPSS 0.2%CVE-2026-49376MEDIUMIn JetBrains TeamCity before 2026.1 insufficient username validation in the SAML pluginEPSS 0.2%CVE-2026-123299LOWIn JetBrains Hub before 2026.2.52519 information disclosure via user search queries was possibleEPSS 0.2%CVE-2026-100276MEDIUMIn JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the actionEPSS 0.2%CVE-2026-64803HIGHIn JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDKEPSS 0.2%CVE-2026-64802HIGHIn JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integrationEPSS 0.2%CVE-2026-100262HIGHIn JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notificatioEPSS 0.2%CVE-2026-103494MEDIUMIn JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changesEPSS 0.2%CVE-2025-68162LOWIn JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configurationEPSS 0.2%CVE-2025-68267MEDIUMIn JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installaEPSS 0.2%CVE-2026-103488HIGHIn JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access reEPSS 0.2%CVE-2026-86502HIGHIn JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote DeEPSS 0.2%CVE-2023-34339LOWIn JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's messageEPSS 0.2%CVE-2025-54530HIGHIn JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissionsEPSS 0.2%CVE-2026-123850LOWIn JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directivesEPSS 0.2%