Skip to main content

Space

3 CVEs product

Monthly

CVE-2020-11796 Apr 22, 14:15 CRITICAL Act Now

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Space JetBrains
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2020-11795 Apr 22, 14:15 HIGH This Week

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Space JetBrains
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2020-11416 Apr 22, 14:15 MEDIUM This Month

JetBrains Space through 2020-04-22 allows stored XSS in Chats. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Space JetBrains
NVD
CVSS 3.1
5.4
EPSS
0.5%
EPSS 1% CVSS 9.8
CRITICAL Act Now

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Space JetBrains
NVD
EPSS 1% CVSS 7.5
HIGH This Week

In JetBrains Space through 2020-04-22, the session timeout period was configured improperly. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Space JetBrains
NVD
EPSS 1% CVSS 5.4
MEDIUM This Month

JetBrains Space through 2020-04-22 allows stored XSS in Chats. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Space JetBrains
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy