Jetbrains Vulnérabilités

Chronologie

Taper

Produit

JetBrains TeamCity107
JetBrains YouTrack57
JetBrains IntelliJ IDEA35
JetBrains Hub23
JetBrains Ktor7

Contre-mesures

Official Fix274
Temporary Fix0
Workaround0
Unavailable0
Not Defined15

Exploitabilité

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined288

Vecteur d'accès

Not Defined0
Physical0
Local25
Adjacent96
Network168

Authentification

Not Defined0
High18
Low171
None100

Interaction de l'utilisateur

Not Defined0
Required73
None216

C3BM Index

CVSSv3 Base

≤10
≤21
≤38
≤456
≤542
≤6105
≤746
≤816
≤913
≤102

CVSSv3 Temp

≤10
≤21
≤312
≤452
≤552
≤6106
≤736
≤816
≤912
≤102

VulDB

≤10
≤21
≤315
≤476
≤551
≤685
≤728
≤831
≤90
≤102

NVD

≤10
≤20
≤32
≤42
≤59
≤648
≤722
≤840
≤910
≤1019

CNA

≤10
≤20
≤35
≤411
≤510
≤67
≤710
≤83
≤92
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k105
<2k109
<5k75
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k288
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (33): Code With Me (3), Gateway (1), GoLand (2), Hub (23), IdeaVim (1), IntelliJ (1), IntelliJ IDEA (35), IntelliJ IDEA Ultimate (3), Kotlin (4), Ktor (7), Ktor Framework (4), Ktor Native (2), MPS (1), PhpStorm (2), PyCharm (4), PyCharm Professional (1), ReSharper Installer (1), Rider (4), RubyMine (2), Scala Plugin (1), Space (3), Spring Boot (1), TeamCity (107), TeamCity Plugin (3), ToolBox (4), ToolBox App (1), Upsource (3), VIM Plugin (1), WebStorm (3), YouTrack (57), YouTrack Mobile (6), YouTrack Plugin (2), YouTrack Server (1)

PubliéBaseTempVulnérabilitéProdExpConCTIEPSSCVE
23/02/20234.84.7JetBrains TeamCity Group Creation cross site scriptingInconnueNot DefinedOfficial Fix0.030.00046CVE-2022-48344
23/02/20234.84.7JetBrains TeamCity User Creation cross site scriptingInconnueNot DefinedOfficial Fix0.060.00046CVE-2022-48343
23/02/20235.35.1JetBrains TeamCity jVMTI elévation de privilègesInconnueNot DefinedOfficial Fix0.060.00091CVE-2022-48342
22/12/20226.16.0JetBrains IntelliJ IDEA vulnérabilité inconnueInconnueNot DefinedOfficial Fix0.030.00043CVE-2022-47896
22/12/20225.15.1JetBrains IntelliJ IDEA Validate JSP File chiffrement faibleInconnueNot DefinedOfficial Fix0.030.00087CVE-2022-47895
09/12/20224.74.7JetBrains IntelliJ IDEA Custom Plugin XML External EntityInconnueNot DefinedOfficial Fix0.030.00043CVE-2022-46827
09/12/20224.04.0JetBrains TeamCity STS Endpoint elévation de privilègesInconnueNot DefinedNot Defined0.000.00046CVE-2022-46830
09/12/20227.06.9JetBrains Gateway authentification faibleInconnueNot DefinedOfficial Fix0.000.00091CVE-2022-46829
09/12/20226.16.0JetBrains IntelliJ IDEA DYLIB elévation de privilègesInconnueNot DefinedOfficial Fix0.030.00043CVE-2022-46828
09/12/20225.05.0JetBrains IntelliJ IDEA Built-In Web Server divulgation de l'informationInconnueNot DefinedOfficial Fix0.000.00044CVE-2022-46826
09/12/20223.53.5JetBrains IntelliJ IDEA Built-In Web Server divulgation de l'informationInconnueNot DefinedOfficial Fix0.000.00043CVE-2022-46825
09/12/20226.05.9JetBrains IntelliJ IDEA fsnotifier Daemon buffer overflowInconnueNot DefinedOfficial Fix0.060.00043CVE-2022-46824
09/12/20225.45.4JetBrains TeamCity Default Credential Provider Chain Privilege EscalationInconnueNot DefinedNot Defined0.030.00049CVE-2022-46831
18/11/20224.84.8JetBrains Hub Email dénie de serviceInconnueNot DefinedOfficial Fix0.040.00046CVE-2022-45471
03/11/20224.74.6JetBrains TeamCity User Setting vulnérabilité inconnueInconnueNot DefinedOfficial Fix0.030.00046CVE-2022-44646
03/11/20225.45.3JetBrains TeamCity divulgation de l'informationInconnueNot DefinedOfficial Fix0.020.00087CVE-2022-44624
03/11/20225.45.3JetBrains TeamCity Project Viewer divulgation de l'informationInconnueNot DefinedOfficial Fix0.030.00087CVE-2022-44623
03/11/20223.63.5JetBrains TeamCity Secure Token Health Item elévation de privilègesInconnueNot DefinedOfficial Fix0.020.00046CVE-2022-44622
23/09/20224.14.1JetBrains TeamCity Environment Variable divulgation de l'informationInconnueNot DefinedOfficial Fix0.050.00046CVE-2022-40979
19/09/20227.67.5JetBrains IntelliJ IDEA elévation de privilègesInconnueNot DefinedOfficial Fix0.040.00053CVE-2022-40978
12/08/20223.13.0JetBrains Ktor authentification faibleInconnueNot DefinedOfficial Fix0.070.00087CVE-2022-38180
12/08/20225.55.4JetBrains Ktor File Download elévation de privilègesInconnueNot DefinedOfficial Fix0.000.00046CVE-2022-38179
11/08/20223.73.7JetBrains TeamCity Private SSH Key divulgation de l'informationInconnueNot DefinedOfficial Fix0.000.00046CVE-2022-38133
04/08/20225.25.1JetBrains Rider Project Dialog elévation de privilègesInconnueNot DefinedOfficial Fix0.000.00042CVE-2022-37396
28/07/20223.43.4JetBrains IntelliJ IDEA Email Address elévation de privilègesInconnueNot DefinedOfficial Fix0.030.00043CVE-2022-37010

264 plus d'entrées ne sont pas affichées

Do you need the next level of professionalism?

Upgrade your account now!