CVE-2021-30482

Description

References

• blog.jetbrains.com · Vendor Advisory
• blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021 · Vendor Advisory

upsource 的其他漏洞

• CVE-2019-19704高危 7.5In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.
• CVE-2019-12157严重 9.8In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.
• CVE-2019-12156中危 5.3Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity ver…
• CVE-2019-14961中危 6.1JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS.