Skip to contentJetbrains Teamcity vulnerabilities
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection pageCVE-2024-418263.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tabCVE-2024-418254.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build...CVE-2024-418246.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile...CVE-2024-398795.0 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App...CVE-2024-398784.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge casesCVE-2024-364708.1 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tokensCVE-2024-363785.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.2 certain TeamCity API endpoints did not check user permissionsCVE-2024-363776.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their permissionsCVE-2024-363766.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposedCVE-2024-363755.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possibleCVE-2024-363744.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possibleCVE-2024-363734.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possibleCVE-2024-363724.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possibleCVE-2024-363714.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possibleCVE-2024-363704.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via issue tracker integration was possibleCVE-2024-363694.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possibleCVE-2024-363684.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party reports was possibleCVE-2024-363674.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering operationsCVE-2024-363665.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agentCVE-2024-363656.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was possibleCVE-2024-363646.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 several Stored XSS in code inspection reports were possibleCVE-2024-363634.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possibleCVE-2024-363626.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possibleCVE-2024-353025.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the...CVE-2024-353015.5 Medium
- jetbrains teamcityIn JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates...CVE-2024-353003.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the...CVE-2024-311404.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detectorCVE-2024-311395.9 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settingsCVE-2024-31138EPSS 74.7%4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configurationCVE-2024-311376.8 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameterCVE-2024-311367.4 High
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 open redirect was possible on the login pageCVE-2024-311356.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could...CVE-2024-311346.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain...CVE-2024-298804.2 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage...CVE-2024-281745.8 Medium
- jetbrains teamcityIn JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password"...CVE-2024-281734.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions ...CVE-2024-27199In KEVPublic exploitEPSS 100.0%7.3 High
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions...CVE-2024-27198In KEVPublic exploitEPSS 99.9%9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archivesCVE-2024-24942EPSS 32.0%5.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possibleCVE-2024-23917EPSS 54.0%9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL...CVE-2024-249385.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possibleCVE-2024-249374.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint...CVE-2024-249364.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.11.1 a CSRF on login was possibleCVE-2023-508704.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configurationCVE-2023-435663.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server...CVE-2023-42793In KEVPublic exploitEPSS 100.0%9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registrationCVE-2023-412503.5 Low
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build StepCVE-2023-41249EPSS 55.5%4.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configurationCVE-2023-412484.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possibleCVE-2023-391754.6 Medium
- Show moreLoading…