CVE-2019-12156

Mô tả

Tham khảo

• blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019 · Vendor Advisory

Lỗ hổng khác của upsource

• CVE-2021-30482CAO 7.5In JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctly
• CVE-2019-19704CAO 7.5In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.
• CVE-2019-12157NGHIÊM TRỌNG 9.8In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.
• CVE-2019-14961TRUNG BÌNH 6.1JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS.