CVE-2019-12156

概要

参考情報

• blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019 · Vendor Advisory

upsource のその他の脆弱性

• CVE-2021-30482高 7.5In JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctly
• CVE-2019-19704高 7.5In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.
• CVE-2019-12157緊急 9.8In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.
• CVE-2019-14961中 6.1JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS.