Skip to contentJetbrains Teamcity vulnerabilities
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue...CVE-2023-391744.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain...CVE-2023-391735.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written...CVE-2023-380674.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during...CVE-2023-380664.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possibleCVE-2023-380654.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be...CVE-2023-380644.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possibleCVE-2023-380634.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI...CVE-2023-380624.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possibleCVE-2023-380614.6 Medium
- jetbrains teamcityJetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a...CVE-2015-13136.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possibleCVE-2023-342294.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for...CVE-2023-342285.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacksCVE-2023-342275.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possibleCVE-2023-342264.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possibleCVE-2023-34225EPSS 60.7%4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possibleCVE-2023-342244.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies...CVE-2023-342234.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possibleCVE-2023-342224.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possibleCVE-2023-342214.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possibleCVE-2023-34220EPSS 61.4%4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate...CVE-2023-342194.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin...CVE-2023-342189.1 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possibleCVE-2022-48428EPSS 68.0%4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was...CVE-2022-484274.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possibleCVE-2022-484264.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process.CVE-2022-483445.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.CVE-2022-48343EPSS 59.5%5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.CVE-2022-483425.2 Medium
- jetbrains teamcityIn JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default...CVE-2022-468316.6 Medium
- jetbrains teamcityIn JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port...CVE-2022-468304.1 Medium
- jetbrains teamcityIn JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's...CVE-2022-446462.2 Low
- jetbrains teamcityIn JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build...CVE-2022-446246.5 Medium
- jetbrains teamcityIn JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in...CVE-2022-446236.5 Medium
- jetbrains teamcityIn JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token...CVE-2022-446222.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged...CVE-2022-409794.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in...CVE-2022-381333.2 Low
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.2 build parameter injection was possibleCVE-2022-363225.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.2 the private SSH key could be written to the build log in...CVE-2022-363214.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possibleCVE-2022-299293.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possibleCVE-2022-299284.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possibleCVE-2022-299274.6 Medium
- jetbrains teamcityJetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS.CVE-2022-252616.1 Medium
- jetbrains teamcityJetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push...CVE-2022-252639.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be...CVE-2022-252647.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.CVE-2022-24342Public exploit8.8 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't...CVE-2022-243417.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was...CVE-2022-243409.8 Critical
- jetbrains teamcityJetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS.CVE-2022-243395.4 Medium
- jetbrains teamcityJetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS.CVE-2022-243386.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked...CVE-2022-243376.5 Medium
- Show moreLoading…