CVE-2020-11795

JetBrains Space (through 2020-04-22) has a session timeout misconfiguration affecting the Space component, per CVE-2020-11795. Connected sources confirm Space’s session timeout issue existed in versions up to 2020-04-22, described as an improper session timeout configuration. The JetBrains Q1-202...

CVE-2020-11796

CVE-2020-11796 concerns a vulnerability in JetBrains Space where, through 2020-04-22, the password authentication implementation was insecure. The connected CNVD entry explicitly notes a vulnerability in Space versions up to 2020-04-22 that allows an attacker to bypass security restrictions due t...

CVE-2020-11416

JetBrains Space Chats suffer from stored XSS through 2020-04-22 due to insufficient validation of client-side data in the web application. Affected component: Space Chats in JetBrains Space (Space product). Root cause (per CNVD-2020-25754): lack of proper validation of client-side data in the WEB...