Skip to content

Jetbrains Teamcity vulnerabilities

jetbrains teamcityIn JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user...CVE-2020-158286.5 MediumAugust 8, 2020
jetbrains teamcityIn JetBrains TeamCity before 2019.2.3, password parameters could be disclosed via build logs.CVE-2020-158295.3 MediumAugust 8, 2020
jetbrains teamcityIn JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other...CVE-2020-158258.8 HighAugust 8, 2020
jetbrains teamcityIn JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have.CVE-2020-158264.3 MediumAugust 8, 2020
jetbrains teamcityIn JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled...CVE-2020-119384.9 MediumApril 22, 2020
jetbrains teamcityIn JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import...CVE-2020-116896.5 MediumApril 22, 2020
jetbrains teamcityIn JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his...CVE-2020-116887.5 HighApril 22, 2020
jetbrains teamcityIn JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on...CVE-2020-116877.5 HighApril 22, 2020
jetbrains teamcityIn JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity...CVE-2020-116862.7 LowApril 22, 2020
jetbrains teamcityIn JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS.CVE-2020-79116.1 MediumJanuary 30, 2020
jetbrains teamcityJetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the...CVE-2020-79105.4 MediumJanuary 30, 2020
jetbrains teamcityIn JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI.CVE-2020-79097.5 HighJanuary 30, 2020
jetbrains teamcityIn JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages.CVE-2020-79084.3 MediumJanuary 30, 2020
jetbrains teamcityIn JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user...CVE-2019-183675.3 MediumOctober 31, 2019
jetbrains teamcityIn JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View...CVE-2019-183665.3 MediumOctober 31, 2019
jetbrains teamcityIn JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages.CVE-2019-183654.3 MediumOctober 31, 2019
jetbrains teamcityIn JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow...CVE-2019-183649.8 CriticalOctober 31, 2019
jetbrains teamcityIn JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a...CVE-2019-183635.3 MediumOctober 31, 2019
jetbrains teamcity, upsource +1 moreIn JetBrains TeamCity versions before 2018.2.5 and UpSource versions before 2018.2 build 1293,...CVE-2019-121579.8 CriticalOctober 2, 2019
jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could...CVE-2019-150367.2 HighOctober 2, 2019
jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. It had several XSS vulnerabilities on the...CVE-2019-150376.1 MediumOctober 2, 2019
jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could...CVE-2019-150354.9 MediumOctober 1, 2019
jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. It had no SSL certificate validation for...CVE-2019-150427.5 HighOctober 1, 2019
jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some...CVE-2019-150387.5 HighOctober 1, 2019
jetbrains teamcityAn issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution...CVE-2019-15039Public exploitEPSS 13.1%9.8 CriticalOctober 1, 2019
jetbrains teamcityJetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting (XSS), potentially making it...CVE-2019-158486.1 MediumSeptember 5, 2019
jetbrains teamcityA user without the required permissions could gain access to some JetBrains TeamCity settings....CVE-2019-128464.3 MediumJuly 3, 2019
jetbrains teamcityA reflected XSS on a user page was detected on one of the JetBrains TeamCity pages. The issue was...CVE-2019-128426.1 MediumJuly 3, 2019
jetbrains teamcityIncorrect handling of user input in ZIP extraction was detected in JetBrains TeamCity. The issue...CVE-2019-128417.5 HighJuly 3, 2019
jetbrains teamcityA possible stored JavaScript injection requiring a deliberate server administrator action was...CVE-2019-128436.1 MediumJuly 3, 2019
jetbrains teamcityThe generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving...CVE-2019-128455.3 MediumJuly 3, 2019
jetbrains teamcityA possible stored JavaScript injection was detected on one of the JetBrains TeamCity pages. The...CVE-2019-128446.1 MediumJuly 3, 2019
jetbrains teamcityCross-site scripting (XSS) vulnerability in JetBrains TeamCity before 8.1 allows remote attackers...CVE-2014-100364.3 MediumJanuary 13, 2015
jetbrains teamcityUnspecified vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to obtain...CVE-2014-100025.0 MediumJanuary 13, 2015