Vulnerabilities > Jetbrains > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-08-16 CVE-2024-43810 Cross-site Scripting vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin
network
low complexity
jetbrains CWE-79
5.4
2024-07-22 CVE-2024-41824 Information Exposure Through Log Files vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific cases
network
low complexity
jetbrains CWE-532
6.5
2024-07-22 CVE-2024-41825 Cross-site Scripting vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab
network
low complexity
jetbrains CWE-79
5.4
2024-07-22 CVE-2024-41826 Cross-site Scripting vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page
network
low complexity
jetbrains CWE-79
4.8
2024-07-22 CVE-2024-41828 Unspecified vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time
network
low complexity
jetbrains
6.5
2024-07-01 CVE-2024-39878 Insufficiently Protected Credentials vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection
network
low complexity
jetbrains CWE-522
5.3
2024-07-01 CVE-2024-39879 Insufficiently Protected Credentials vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settings
network
low complexity
jetbrains CWE-522
5.3
2024-06-18 CVE-2024-38504 Missing Authorization vulnerability in Jetbrains Youtrack
In JetBrains YouTrack before 2024.2.34646 the Guest User Account was enabled for attaching files to articles
network
low complexity
jetbrains CWE-862
5.3
2024-06-18 CVE-2024-38507 Cross-site Scripting vulnerability in Jetbrains HUB
In JetBrains Hub before 2024.2.34646 stored XSS via project description was possible
network
low complexity
jetbrains CWE-79
5.4
2024-03-28 CVE-2024-31135 Open Redirect vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2024.03 open redirect was possible on the login page
network
low complexity
jetbrains CWE-601
6.1