Veille CVE

Recherche « JetBrains Exposed »

9 CVE

Critique 1 Élevée 1 Moyenne 7 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « JetBrains Exposed » ✕
  1. CVE-2026-108474 9.8 Critique

    JetBrains Exposed

    In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

  2. CVE-2026-100279 6.5 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials

  3. CVE-2026-86506 5.9 Moyenne

    JetBrains GoLand

    In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data

  4. CVE-2026-86496 4.3 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses

  5. CVE-2026-86488 6.5 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches

  6. CVE-2026-57924 5.3 Moyenne

    JetBrains YouTrack

    In JetBrains YouTrack before 2026.2.16593 default role configuration exposed excessive user profile details

  7. CVE-2026-49379 6.5 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names

  8. CVE-2026-49378 4.3 Moyenne

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion

  9. CVE-2026-49374 7.6 Élevée

    JetBrains TeamCity

    In JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration parameters