Vulnerabilities

TI-2025-29324 CVE-2025-46618 · GHSA-pp4f-j97h-vw3x

In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab

MEDIUM 63

In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.63034 Published 2025-04-25 Fixed in 2025.03.1 CWE-79

TI-2025-29151 CVE-2025-46433 · GHSA-5fx4-fffc-mc96

MEDIUM 43

In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00555 Published 2025-04-25 Fixed in 2025.03.1 CWE-23

TI-2025-29150 CVE-2025-46432 · GHSA-6wqg-77wv-92mv

LOW 31

In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01026 Published 2025-04-25 Fixed in 2025.03.1 CWE-532