Skip to contentJetbrains Teamcity vulnerabilities
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via...CVE-2022-243365.3 Medium
- jetbrains teamcityJetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race...CVE-2022-243358.1 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private...CVE-2022-243345.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible.CVE-2022-243336.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie.CVE-2022-243325.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible.CVE-2022-243319.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible.CVE-2022-243306.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases.CVE-2021-432029.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, user enumeration was possible.CVE-2021-431945.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, remote code execution via the agent push functionality is...CVE-2021-431939.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection...CVE-2021-431967.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, some HTTP security headers were missing.CVE-2021-431955.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.CVE-2021-431976.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are...CVE-2021-431995.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, stored XSS is possible.CVE-2021-431985.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.2, permission checks in the Agent Push functionality were...CVE-2021-432009.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.3, a newly created project could take settings from an...CVE-2021-432015.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS.CVE-2021-375487.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.CVE-2021-375475.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted...CVE-2021-375465.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were...CVE-2021-375457.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.4, there was an insecure deserialization.CVE-2021-375449.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, XSS was possible.CVE-2021-375426.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was...CVE-2021-319159.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was...CVE-2021-319149.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during...CVE-2021-319137.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a...CVE-2021-319128.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages.CVE-2021-319116.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible.CVE-2021-319107.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages.CVE-2021-319085.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was...CVE-2021-319099.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, stored XSS on a tests page was possible.CVE-2021-33155.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, permission checks for changing TeamCity plugins were...CVE-2021-319075.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, audit logs were not sufficient when an administrator...CVE-2021-319062.7 Low
- jetbrains teamcityInformation disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible...CVE-2021-263093.3 Low
- jetbrains teamcityIn the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible.CVE-2021-263107.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, XSS was potentially possible on the test history page.CVE-2021-319046.1 Medium
- jetbrains teamcityJetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose...CVE-2020-35667Public exploit7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly.CVE-2021-257775.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.1, permissions during user deletion were checked improperly.CVE-2021-257785.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.1, the server admin could create and see access tokens for...CVE-2021-257753.8 Low
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of...CVE-2021-257744.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters.CVE-2021-257767.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration.CVE-2021-257725.3 Medium
- jetbrains teamcityJetBrains TeamCity before 2020.2 was vulnerable to reflected XSS on several pages.CVE-2021-257736.1 Medium
- jetbrains teamcityJetBrains TeamCity before 2020.1.2 was vulnerable to URL injection.CVE-2020-276276.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.1.5, the Guest user had access to audit records.CVE-2020-276284.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.1.5, secure dependency parameters could be not masked in...CVE-2020-276295.3 Medium
- jetbrains teamcityJetBrains TeamCity before 2019.2.3 is vulnerable to stored XSS in the administration UI.CVE-2020-158306.1 Medium
- jetbrains teamcityJetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI.CVE-2020-158316.1 Medium
- Show moreLoading…