Code injection

Incorrect handling of user input in ZIP extraction was detected in JetBrains TeamCity. The issue was fixed in TeamCity 2018.2.2...

Code injection

The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fixed in JetBrains TeamCity 2018.2.3...

Design/Logic Flaw

A possible stored JavaScript injection requiring a deliberate server administrator action was detected. The issue was fixed in JetBrains TeamCity 2018.2.3...

CVE-2019-10103

JetBrains IntelliJ IDEA projects created using the Kotlin JS Client/JVM Server IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101...

Code injection

JetBrains IntelliJ IDEA projects created using the Kotlin JS Client/JVM Server IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101...

Code injection

JetBrains Kotlin versions before 1.3.30 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack...

Code injection

JetBrains Ktor framework created using the Kotlin IDE template versions before 1.1.0 were resolving artifacts using an http connection during the build process, potentially allowing an MITM attack. This issue was fixed in Kotlin plugin version 1.3.30...

CVE-2019-12852

CVE-2019-12852 applies to JetBrains YouTrack server and is an SSRF vulnerability (one of two issues). The Red Hat and NVD entries corroborate that an SSRF could be triggered on YouTrack servers, with remediation implemented in JetBrains YouTrack 2018.4.49168. The JetBrains security bulletin confi...

CVE-2019-12852

An SSRF attack was possible on a JetBrains YouTrack server. The issue 1 of 2 was fixed in JetBrains YouTrack 2018.4.49168...

CVE-2019-12846

A user without the required permissions could gain access to some JetBrains TeamCity settings. The issue was fixed in TeamCity 2018.2.2...

CVE-2019-12846

CVE-2019-12846 affects JetBrains TeamCity: a user lacking required permissions could access certain TeamCity settings. The issue was addressed by upgrading to TeamCity 2018.2.2. Multiple sources (NVD, Red Hat, CNVD, CVE lists) concur on the affected product and fix version; no exploit details are...

CVE-2019-12842

A reflected XSS on a user page was detected on one of the JetBrains TeamCity pages. The issue was fixed in TeamCity 2018.2.2...

CVE-2019-12842

JetBrains TeamCity is affected by CVE-2019-12842, a reflected XSS on a user page. The issue stems from insufficient validation of client-side data and could allow execution of arbitrary scripts in the context of the affected user page. JetBrains fixed this in TeamCity 2018.2.2. Other sources (NVD...

CVE-2019-12841

CVE-2019-12841 affects JetBrains TeamCity. The issue is an incorrect handling of user input during ZIP extraction in TeamCity, with the root cause being improper input handling during ZIP extraction. The vulnerability has been fixed in TeamCity 2018.2.2. Other connected sources corroborate this d...

CVE-2019-12841

Incorrect handling of user input in ZIP extraction was detected in JetBrains TeamCity. The issue was fixed in TeamCity 2018.2.2...

CVE-2019-12843

CVE-2019-12843 is a stored JavaScript injection vulnerability in JetBrains TeamCity that requires deliberate server administrator action to trigger. The issue was fixed in TeamCity 2018.2.3. Connected sources confirm the vulnerability and the remediation, but do not provide additional exploit det...

CVE-2019-12843

A possible stored JavaScript injection requiring a deliberate server administrator action was detected. The issue was fixed in JetBrains TeamCity 2018.2.3...

CVE-2019-12845

CVE-2019-12845 affects JetBrains TeamCity. The generated Kotlin DSL settings allowed artifacts to be resolved over an unencrypted connection, exposing potential MITM risks. Root cause: unencrypted artifact resolution in Kotlin DSL settings. Impact: exposure of artifact resolution traffic (no deta...

CVE-2019-12845

The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fixed in JetBrains TeamCity 2018.2.3...

CVE-2019-12844

CVE-2019-12844 corresponds to a stored JavaScript injection on JetBrains TeamCity pages. Multiple sources confirm the vulnerability exists in TeamCity and was fixed in TeamCity 2018.2.3. Connected records (NVD, Red Hat, CNVD, CVE list, and JetBrains security bulletin) consistently describe a stor...