Jetbrains: Security Vulnerabilities
In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment.
CVSS Score
5.4
EPSS Score
0.006
Published
2021-05-11
In JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient checks when getting the project from VCS.
CVSS Score
7.8
EPSS Score
0.005
Published
2021-05-11
In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS.
CVSS Score
7.8
EPSS Score
0.008
Published
2021-05-11
In IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure.
CVSS Score
7.5
EPSS Score
0.011
Published
2021-05-11
In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation.
CVSS Score
7.5
EPSS Score
0.023
Published
2021-05-11
In JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could execute code in read-only mode.
CVSS Score
8.8
EPSS Score
0.013
Published
2021-05-11
In JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host.
CVSS Score
5.3
EPSS Score
0.007
Published
2021-05-11
In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group.
CVSS Score
7.5
EPSS Score
0.009
Published
2021-05-11
In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly.
CVSS Score
7.5
EPSS Score
0.012
Published
2021-05-11
In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS.
CVSS Score
6.1
EPSS Score
0.008
Published
2021-05-11