Threat Investigation
Request a demo

CVE-2019-12156

Medium

Description

Server metadata could be exposed because one of the error messages reflected the whole response back to the client in JetBrains TeamCity versions before 2018.2.5 and UpSource versions before 2018.2 build 1293.

SeverityMedium
CVSS5.3
Exploit probability—
ProductJetbrains Upsource
PublishedOct 2, 2019
First seenOct 2, 2019

How to fix

Update
  • jetbrains upsource2018.2.1290 or later

Affected products

ProductAffected versionsFixed in
jetbrains upsourcev < 2018.2.12902018.2.1290

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.