CVE-2019-14961

JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS.

Date published : 2019-10-01

JetBrains Security Bulletin Q2 2019