CVE-2019-19704

In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm...

CVE-2019-19704

CVE-2019-19704 affects JetBrains Upsource prior to 2020.1, where an incorrect user matching algorithm could lead to information disclosure. The Red Hat/CNVD/NVD entries corroborate that Upsource before 2020.1 is vulnerable due to this issue. The Red Hat entry and CNVD descriptions consistently st...

PT-2020-10225

Name of the Vulnerable Software and Affected Versions JetBrains Upsource versions prior to 2020.1 Description The issue is related to an incorrect user matching algorithm, which can lead to information disclosure. Recommendations For versions prior to 2020.1, update to version 2020.1 or later to...

CVE-2019-19704: Undefined Security Weakness

In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm...

JetBrains TeamCity Injection Vulnerability

JetBrains TeamCity and JetBrains Upsource are both products of the Czech company JetBrains. JetBrains TeamCity is a set of distributed build management and continuous integration tools. The tool provides continuous unit testing, code quality analysis and build problem analysis reports, etc...

JetBrains Upsource Cross-Site Scripting Vulnerability

JetBrains Upsource is a set of code review tools from the Czech company JetBrains. A cross-site scripting vulnerability exists in versions prior to JetBrains Upsource 2019.1.1412. The vulnerability stems from the lack of proper validation of client data by the WEB application. An attacker can...

CVE-2019-12157

In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands...

CVE-2019-12156

Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity versions before 2018.2.5 and UpSource versions before 2018.2 build 1293...

CVE-2019-12157

In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands...

CVE-2019-12156

Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity versions before 2018.2.5 and UpSource versions before 2018.2 build 1293...

Code injection

Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity versions before 2018.2.5 and UpSource versions before 2018.2 build 1293...

Design/Logic Flaw

In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands...

CVE-2019-12156

Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity versions before 2018.2.5 and UpSource versions before 2018.2 build 1293...

CVE-2019-12156

CVE-2019-12156 affects JetBrains TeamCity (before 2018.2.5) and UpSource (before 2018.2 build 1293). Root cause: an error message could reflect the entire server response, leading to exposure of server metadata. Impact: potential disclosure of sensitive information via error responses. Remediatio...

CVE-2019-12157

In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands...

CVE-2019-12157

CVE-2019-12157 affects JetBrains Upsource prior to 2018.2 build 1293, with a credential disclosure vulnerability exposed via RPC commands. The issue is reported across multiple feeds (NVD, Red Hat, CVE lists) and tied to Upsource components in the 2018.2 train; the JetBrains bulletin confirms Ups...

PT-2019-12665

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2018.2.5 JetBrains UpSource versions prior to 2018.2 build 1293 Description The issue allows server metadata to be exposed due to an error message that reflects the whole response back to the client...

PT-2019-12666

Name of the Vulnerable Software and Affected Versions JetBrains UpSource versions prior to 2018.2 build 1293 Description The issue concerns credential disclosure through RPC commands, potentially allowing unauthorized access to sensitive information. Recommendations For versions prior to 2018.2...

CVE-2019-12157: Improper Input Validation

In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands...

CVE-2019-12156: Generation of Error Message Containing Sensitive Information

Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity versions before 2018.2.5 and UpSource versions before 2018.2 build 1293...