| CVE-2021-25773 | MEDIO6.1 | JetBrains TeamCity before 2020.2 was vulnerable to reflected XSS on several pages. | 03/02/2021 |
| CVE-2021-25772 | MEDIO5.3 | In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration. | 03/02/2021 |
| CVE-2021-25771 | MEDIO4.3 | In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed. | 03/02/2021 |
| CVE-2021-25770 | CRITICO9.8 | In JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible, which could lead to code execution. | 03/02/2021 |
| CVE-2021-25769 | ALTO7.5 | In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments. | 03/02/2021 |
| CVE-2021-25768 | MEDIO5.3 | In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly. | 03/02/2021 |
| CVE-2021-25767 | MEDIO5.3 | In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution. | 03/02/2021 |
| CVE-2021-25766 | MEDIO5.3 | In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made. | 03/02/2021 |
| CVE-2021-25765 | ALTO8.8 | In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible. | 03/02/2021 |
| CVE-2021-25763 | MEDIO5.3 | In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default. | 03/02/2021 |
| CVE-2021-25762 | MEDIO5.3 | In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible. | 03/02/2021 |
| CVE-2021-25761 | MEDIO5.3 | In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible. | 03/02/2021 |
| CVE-2021-25760 | MEDIO5.3 | In JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible. | 03/02/2021 |
| CVE-2021-25759 | MEDIO6.5 | In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user. | 03/02/2021 |
| CVE-2021-25758 | ALTO7.8 | In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution. | 03/02/2021 |
| CVE-2021-25757 | MEDIO6.1 | In JetBrains Hub before 2020.1.12629, an open redirect was possible. | 03/02/2021 |
| CVE-2021-25756 | MEDIO5.3 | In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS. | 03/02/2021 |
| CVE-2021-25755 | BASSO2.5 | In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic. | 03/02/2021 |
| CVE-2020-35667 | ALTO7.5 | JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials. | 03/02/2021 |
| CVE-2020-29582 | MEDIO5.3 | In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An attacker was able to read data from such files and list directories due to insecure permissions. | 03/02/2021 |