Upsource (Jetbrains) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 31 known versions, newest CVE from 2021-05-11. Vendor: Jetbrains.

CVEs of Upsource

• CVE-2021-30482 - CVSS 7.5 (high), 2021-05-11: In JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctly
• CVE-2019-19704 - CVSS 7.5 (high), 2020-08-08: In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.
• CVE-2019-12157 - CVSS 9.8 (critical), 2019-10-02: In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.
• CVE-2019-12156 - CVSS 5.3 (medium), 2019-10-02: Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity versions before…
• CVE-2019-14961 - CVSS 6.1 (medium), 2019-10-01: JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS.