Jetbrains: Security Vulnerabilities
In JetBrains IntelliJ IDEA before 2020.2, the built-in web server could expose information about the IDE version.
CVSS Score
5.3
EPSS Score
0.013
Published
2020-11-16
JetBrains IdeaVim before version 0.58 might have caused an information leak in limited circumstances.
CVSS Score
7.5
EPSS Score
0.011
Published
2020-11-16
JetBrains TeamCity before 2020.1.2 was vulnerable to URL injection.
CVSS Score
6.1
EPSS Score
0.007
Published
2020-11-16
In JetBrains Ktor before 1.4.1, HTTP request smuggling was possible.
CVSS Score
6.5
EPSS Score
0.008
Published
2020-11-16
JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF.
CVSS Score
5.3
EPSS Score
0.014
Published
2020-11-16
In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues.
CVSS Score
5.3
EPSS Score
0.014
Published
2020-11-16
JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF.
CVSS Score
5.3
EPSS Score
0.013
Published
2020-11-16
In JetBrains TeamCity before 2020.1.5, the Guest user had access to audit records.
CVSS Score
4.3
EPSS Score
0.007
Published
2020-11-16
In JetBrains TeamCity before 2020.1.5, secure dependency parameters could be not masked in depending builds when there are no internal artifacts.
CVSS Score
5.3
EPSS Score
0.009
Published
2020-11-16
Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups.
CVSS Score
3.3
EPSS Score
0.003
Published
2020-11-16