Ce mail provient de l'extérieur, restons vigilants

=====================================================================


                            CERT-Renater

                Note d'Information No. 2026/VULN1038
_____________________________________________________________________

DATE                : 16/10/2026

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Datalore versions prior to
                                   2026.2.1,
                     Junie CLI versions prior to 26.8.3,
                     TeamCity versions prior to 2026.2, 2026.1.4,
                                     2025.11.8,
                     YouTrack versions prior to 2026.2.19575,
                      2026.3.16075, 2026.3.16397, 2026.3.16402,
                     Exposed versions prior to 	1.5.1.

====================================================================
https://www.jetbrains.com/privacy-security/issues-fixed/
_____________________________________________________________________

Product	Description	Severity	Resolved In	CWE	CVE

Datalore	Unauthenticated path traversal via the report blob
endpoint allowed reading arbitrary files. Reported by hieudc
(DL-17008)	High	2026.2.1	CWE-23	CVE-2026-111093

Junie CLI	Code execution was possible via an untrusted
project's MCP server configuration. Reported by syaifmax (JUNIE-3056)
High	26.8.3	CWE-829	CVE-2026-111091

TeamCity	Remote code execution via a whitelist bypass in the
build messages protocol was possible. Reported by HoYoSec Lufei
(TW-103081)	High	2026.2, 2026.1.4, 2025.11.8
CWE-502	CVE-2026-111094

TeamCity	Stored XSS in the classic project overview was
possible. Reported by Antoni Tremblay (TW-102754)
High	2026.2, 2026.1.4, 2025.11.8	CWE-79	CVE-2026-111095

TeamCity	Stored XSS in the classic build log was possible.
Reported by Antoni Tremblay (TW-102979)	Medium
2026.2, 2026.1.4, 2025.11.8	CWE-79	CVE-2026-111096

YouTrack	Mail rules allowed a project admin to execute
cross-project issue commands. Reported by Antoni Tremblay (JT-98094)
Medium	2026.2.195752026.3.160752026.3.163972026.3.16402
CWE-862	CVE-2026-111092

Exposed	SQL injection was possible via unescaped string arguments
of several SQL functions (EXPOSED-1093)	Critical
1.5.1	CWE-89	CVE-2026-108474


=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================