Jetbrains: Security Vulnerabilities
In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible
CVSS Score
7.5
EPSS Score
0.008
Published
2023-04-24
In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing
CVSS Score
4.1
EPSS Score
0.005
Published
2023-04-24
In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file
CVSS Score
3.3
EPSS Score
0.002
Published
2023-04-04
In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.
CVSS Score
5.2
EPSS Score
0.002
Published
2023-03-29
In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server.
CVSS Score
6.1
EPSS Score
0.006
Published
2023-03-29
In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview.
CVSS Score
5.5
EPSS Score
0.003
Published
2023-03-29
In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation.
CVSS Score
4.5
EPSS Score
0.001
Published
2023-03-29
In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible
CVSS Score
4.6
EPSS Score
0.01
Published
2023-03-27
In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible
CVSS Score
4.6
EPSS Score
0.68
Published
2023-03-27
In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible
CVSS Score
4.6
EPSS Score
0.01
Published
2023-03-27