TI-2023-17065 CVE-2023-34229 · GHSA-6ccf-gwp9-2fxw
In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible
Priority LOW 27
In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible
Vulnerabilities
12 records
TI-2023-17064 CVE-2023-34228 · GHSA-2f8h-x67p-5q4w
In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not…
Priority LOW 29
In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actions
TI-2023-17063 CVE-2023-34227 · GHSA-pg27-cwr7-cgq8
In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks
Priority LOW 39
In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks
TI-2023-17062 CVE-2023-34226 · GHSA-v3h4-r24q-fhwc
In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible
Priority LOW 29
In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible
TI-2023-17061 CVE-2023-34225 · GHSA-8ppw-44ph-hpfq
In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible
Priority MEDIUM 59
In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible
TI-2023-17060 CVE-2023-34224 · GHSA-h8pg-5qr6-rgvg
In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible
Priority LOW 22
In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible
TI-2023-17059 CVE-2023-34223 · GHSA-27q6-3499-5x87
Sensitive information in log files in JetBrains TeamCity
Priority LOW 27
In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases
TI-2023-17058 CVE-2023-34222 · GHSA-rjh2-75vx-8857
In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible
Priority LOW 29
In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible
TI-2023-17057 CVE-2023-34221 · GHSA-2g8f-vcw3-hp3m
In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible
Priority LOW 26
In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible
TI-2023-17056 CVE-2023-34220 · GHSA-ggq6-w2w9-jjw6
In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible
Priority MEDIUM 59
In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible
TI-2023-17055 CVE-2023-34219 · GHSA-73cf-p897-h2x5
Improper authorization in JetBrains TeamCity
Priority LOW 20
In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API
TI-2023-17054 CVE-2023-34218 · GHSA-55qq-x3mf-mhr9
In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible
Priority MEDIUM 50
In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible