Vulnerabilities > Jetbrains
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-05-31 | CVE-2023-34224 | Unspecified vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible | 4.8 |
| 2023-05-31 | CVE-2023-34225 | Cross-site Scripting vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible | 5.4 |
| 2023-05-31 | CVE-2023-34226 | Unspecified vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible | 6.1 |
| 2023-05-31 | CVE-2023-34227 | Unspecified vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks | 7.5 |
| 2023-05-31 | CVE-2023-34228 | Unspecified vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actions | 6.5 |
| 2023-05-31 | CVE-2023-34229 | Unspecified vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible | 5.4 |
| 2023-04-28 | CVE-2022-48481 | Unspecified vulnerability in Jetbrains Toolbox In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible | 7.8 |
| 2023-04-24 | CVE-2022-48476 | Path Traversal vulnerability in Jetbrains Ktor In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible | 7.5 |
| 2023-04-24 | CVE-2022-48477 | Unspecified vulnerability in Jetbrains HUB In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing | 9.8 |
| 2023-04-04 | CVE-2022-48435 | Unspecified vulnerability in Jetbrains PHPstorm 2021.3.1 In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file | 3.3 |