Vulnerabilities > Jetbrains > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-08-16 | CVE-2024-43810 | Cross-site Scripting vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin | 5.4 |
2024-07-22 | CVE-2024-41824 | Information Exposure Through Log Files vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific cases | 6.5 |
2024-07-22 | CVE-2024-41825 | Cross-site Scripting vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab | 5.4 |
2024-07-22 | CVE-2024-41826 | Cross-site Scripting vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page | 4.8 |
2024-07-22 | CVE-2024-41828 | Unspecified vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time | 6.5 |
2024-07-01 | CVE-2024-39878 | Insufficiently Protected Credentials vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection | 5.3 |
2024-07-01 | CVE-2024-39879 | Insufficiently Protected Credentials vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settings | 5.3 |
2024-06-18 | CVE-2024-38504 | Missing Authorization vulnerability in Jetbrains Youtrack In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles | 5.3 |
2024-06-18 | CVE-2024-38507 | Cross-site Scripting vulnerability in Jetbrains HUB In JetBrains Hub before 2024.2.34646 stored XSS via project description was possible | 5.4 |
2024-03-28 | CVE-2024-31135 | Open Redirect vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2024.03 open redirect was possible on the login page | 6.1 |