CVE-2019-19704

High

7.5/10

Summary

In JetBrains Upsource before 2020.1, information disclosure is possible because of an incorrect user matching algorithm.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: HIGH
Availability Impact: NONE

References

Advisory Timeline

Published Aug 08, 2020