Jetbrains vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Jetbrains products: 189 record(s), with severity, exploitation and fixes.

Youtrack 83 Teamcity 44 Intellij Idea 26 Hub 10 Pycharm 5 Goland 5 Webstorm 4 Rider 2 Phpstorm 2 Resharper 2 Datalore 2 Dottrace 1 Kotlin 1 Exposed 1 ReSharper, Rider and dotTrace 1 Junie CLI 1 Junie 1 Ktor 1

Exploited only (KEV) →

CVE-2025-67741 Medium · 5.4 CWE-79 Dec 11, 2025

Cross-site Scripting (XSS) in Jetbrains Teamcity

In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute

CVE-2025-67740 Medium · 5.3 CWE-863 Dec 11, 2025

Incorrect Authorization in Jetbrains Teamcity

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata

CVE-2025-67739 Low · 3.1 CWE-939 Dec 11, 2025

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to…

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure

CVE-2025-64773 Low · 3.7 CWE-362 Nov 11, 2025

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit

CVE-2025-64685 High · 7.5 CWE-295 Nov 10, 2025

Improper Certificate Validation in Jetbrains Youtrack

In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure

CVE-2025-64684 High · 7.5 CWE-862 Nov 10, 2025

Missing Authorization in Jetbrains Youtrack

In JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback form

CVE-2025-64683 High · 7.5 CWE-362 Nov 10, 2025

Race Condition in Jetbrains Hub

In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API

CVE-2025-64682 Low · 3.7 CWE-362 Nov 10, 2025

Race Condition in Jetbrains Hub

In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit

CVE-2025-64681 Low · 3.7 CWE-862 Nov 10, 2025

Missing Authorization in Jetbrains Hub

In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations

CVE-2025-64457 High · 7.0 CWE-362 Nov 10, 2025

Race Condition in Jetbrains Dottrace

In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition

CVE-2025-64456 High · 7.8 CWE-347 Nov 10, 2025

Improper Verification of Cryptographic Signature in Jetbrains Resharper

In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation

CVE-2024-27198 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-288 Mar 4, 2024

JetBrains TeamCity Authentication Bypass Vulnerability

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

CVE-2024-27199 High · 7.3 KEV Urgent · 73 Public exploit Ransomware CWE-22 Mar 4, 2024

JetBrains TeamCity Relative Path Traversal Vulnerability

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

CVE-2023-42793 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-306 Sep 19, 2023

JetBrains TeamCity Authentication Bypass Vulnerability

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible