NVD-CWE-noinfo

CVE-2021-25759

February 23, 2023 by

In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user.

February 23, 2023 by

In JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible.

February 23, 2023 by

In JetBrains PhpStorm before 2020.3, source code could be added to debug logs.

February 23, 2023 by

In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made.

February 23, 2023 by

In JetBrains YouTrack before 2020.6.1767, an issue’s existence could be disclosed via YouTrack command execution.

February 23, 2023 by

In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn’t able to access attachments.