CVE-2021-30482

Mô tả

Tham khảo

• blog.jetbrains.com · Vendor Advisory
• blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021 · Vendor Advisory

Lỗ hổng khác của upsource

• CVE-2019-19704CAO 7.5In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.
• CVE-2019-12157NGHIÊM TRỌNG 9.8In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.
• CVE-2019-12156TRUNG BÌNH 5.3Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity ver…
• CVE-2019-14961TRUNG BÌNH 6.1JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS.