Login Request a demo
UP
Product
Upsource
by Jetbrains · last CVE May 11, 2021
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 2Low 0
Severity
All severities5Critical1High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Upsource to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-12157
9.8
2%
Oct 2
In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands
Affected: through 2018.2; 2018.2; 2018.2; 2018.2; 2018.2
CVE-2021-30482
7.5
1%
May 11
In JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctly
Affected: before 2020.1.1883
CVE-2019-19704
7.5
1%
Aug 8
In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm
Affected: before 2020.1
CVE-2019-14961
6.1
1%
Oct 1
JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS
Affected: before 2019.1.1412
CVE-2019-12156
5.3
1%
Oct 2
Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity versions before 2018.2.5 and UpSource…
Affected: before 2018.2.1290
Showing 5