cve@jetbrains.com
organization01
Rollen
Rollen dieser Identität.
02
Referenzen
Weitere Namen und Kennungen dieser Entität.
nvdUS cve@jetbrains.com
03
bewertete Schwachstellen (452)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-117530US | — | — | ||
In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands | ||||
| CVE-2026-111096US | medium5.4 | — | ||
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 stored XSS in the classic build log was possible | ||||
| CVE-2026-111095US | medium5.4 | — | ||
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 stored XSS in the classic project overview was possible | ||||
| CVE-2026-111094US | critical9.8 | — | ||
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible | ||||
| CVE-2026-111093US | — | — | ||
In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files | ||||
| CVE-2026-111092US | —OT erhöht | — | ||
In JetBrains YouTrack before 2026.2.19575
2026.3.16075
2026.3.16397
2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands | ||||
| CVE-2026-111091US | — | — | ||
In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration | ||||
| CVE-2026-108474US | — | — | ||
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions | ||||
| CVE-2026-106219US | high7.5 | — | ||
In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server | ||||
| CVE-2026-106218US | critical10.0 | — | ||
In JetBrains TeamCity before 2026.1.3
2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible | ||||
| CVE-2026-103497US | — | — | ||
In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration | ||||
| CVE-2026-103496US | — | — | ||
In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications | ||||
| CVE-2026-103495US | —OT erhöht | — | ||
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs | ||||
| CVE-2026-103494US | — | — | ||
In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes | ||||
| CVE-2026-103493US | — | — | ||
In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible | ||||
| CVE-2026-103492US | — | — | ||
In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments | ||||
| CVE-2026-103491US | — | — | ||
In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues | ||||
| CVE-2026-103490US | —OT erhöht | — | ||
In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links | ||||
| CVE-2026-103489US | medium5.4 | — | ||
In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible | ||||
| CVE-2026-103488US | —OT erhöht | — | ||
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues | ||||