Vulnerabilidades de Jetbrains
CVEs publicadas que afetam produtos de Jetbrains: 189 registro(s), com severidade, exploração e correções.
Youtrack 83Teamcity 44Intellij Idea 26Hub 10Pycharm 5Goland 5Webstorm 4Rider 2Phpstorm 2Resharper 2Datalore 2Dottrace 1Kotlin 1Exposed 1ReSharper, Rider and dotTrace 1Junie CLI 1Junie 1Ktor 1
CVE-2025-67741
Média · 5.4
CWE-79 11/12/2025
Cross-site Scripting (XSS) em Jetbrains Teamcity
In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute
CVE-2025-67740
Média · 5.3
CWE-863 11/12/2025
Incorrect Authorization em Jetbrains Teamcity
In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata
CVE-2025-67739
Baixa · 3.1
CWE-939 11/12/2025
In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to…
In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure
CVE-2025-64773
Baixa · 3.7
CWE-362 11/11/2025
Race Condition em Jetbrains Youtrack
In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit
CVE-2025-64685
Alta · 7.5
CWE-295 10/11/2025
Improper Certificate Validation em Jetbrains Youtrack
In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure
CVE-2025-64684
Alta · 7.5
CWE-862 10/11/2025
Missing Authorization em Jetbrains Youtrack
In JetBrains YouTrack before 2025.3.104432 information disclosure was possible via the feedback form
CVE-2025-64683
Alta · 7.5
CWE-362 10/11/2025
Race Condition em Jetbrains Hub
In JetBrains Hub before 2025.3.104432 information disclosure was possible via the Users API
CVE-2025-64682
Baixa · 3.7
CWE-362 10/11/2025
Race Condition em Jetbrains Hub
In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit
CVE-2025-64681
Baixa · 3.7
CWE-862 10/11/2025
Missing Authorization em Jetbrains Hub
In JetBrains Hub before 2025.3.104992 a race condition allowed bypass of the user limit via invitations
CVE-2025-64457
Alta · 7.0
CWE-362 10/11/2025
Race Condition em Jetbrains Dottrace
In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race condition
CVE-2025-64456
Alta · 7.8
CWE-347 10/11/2025
Improper Verification of Cryptographic Signature em Jetbrains Resharper
In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation
CVE-2024-27198
Crítica · 9.8
KEV Urgente · 93 Exploit público Ransomware CWE-288 04/03/2024
JetBrains TeamCity Authentication Bypass Vulnerability
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
CVE-2024-27199
Alta · 7.3
KEV Urgente · 73 Exploit público Ransomware CWE-22 04/03/2024
JetBrains TeamCity Relative Path Traversal Vulnerability
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
CVE-2023-42793
Crítica · 9.8
KEV Urgente · 93 Exploit público Ransomware CWE-306 19/09/2023
JetBrains TeamCity Authentication Bypass Vulnerability
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible