Vulnerabilities > Jetbrains
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-08-06 | CVE-2021-37542 | Cross-site Scripting vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2020.2.3, XSS was possible. | 6.1 |
| 2021-08-06 | CVE-2021-37543 | Unspecified vulnerability in Jetbrains Rubymine In JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for untrusted projects. | 8.8 |
| 2021-08-06 | CVE-2021-37544 | Deserialization of Untrusted Data vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization. | 9.8 |
| 2021-08-06 | CVE-2021-37545 | Improper Authentication vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made. | 7.5 |
| 2021-08-06 | CVE-2021-37546 | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used. | 5.3 |
| 2021-08-06 | CVE-2021-37547 | Unspecified vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made. | 5.3 |
| 2021-08-06 | CVE-2021-37548 | Cleartext Storage of Sensitive Information vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS. | 7.5 |
| 2021-08-06 | CVE-2021-37549 | Unspecified vulnerability in Jetbrains Youtrack In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient. | 9.1 |
| 2021-08-06 | CVE-2021-37550 | Incorrect Comparison vulnerability in Jetbrains Youtrack In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used. | 7.5 |
| 2021-08-06 | CVE-2021-37551 | Use of Password Hash With Insufficient Computational Effort vulnerability in Jetbrains Youtrack In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256. | 5.3 |