Code injection

2019-10-0219:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.0%

JSON

Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity versions before 2018.2.5 and UpSource versions before 2018.2 build 1293.

CPENameOperatorVersion
upsourcelt2018.2.1290

CPE	Name	Operator	Version
	upsource	lt	2018.2.1290

References

blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/