Jetbrains Upsource
5 CVEs affecting Jetbrains Upsource. Latest disclosed: 2021-05-11. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-12157 | Critical | 9.8 | 2019-10-02 | In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands. |
CVE-2021-30482 | High | 7.5 | 2021-05-11 | In JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctly |
CVE-2019-19704 | High | 7.5 | 2020-08-08 | In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm. |
CVE-2019-14961 | Medium | 6.1 | 2019-10-01 | JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS. |
CVE-2019-12156 | Medium | 5.3 | 2019-10-02 | Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity versions before 2018.2… |