In JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Teamcity
NVD
CVSS 3.1
5.3
EPSS
0.6%
In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Information Disclosure
Kotlin
Communications Cloud Native Core Binding Support Function
Communications Pricing Design Center
NVD
CVSS 3.1
5.3
EPSS
2.2%
In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Privilege Escalation
Youtrack
NVD
CVSS 3.1
4.3
EPSS
0.6%
Prev
Page 2 of 2