Vulnerabilities

TI-2024-27869 CVE-2024-41829 · GHSA-8qw7-q76p-7f4h

In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection

LOW 33

In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00328 Published 2024-07-22 Fixed in 2024.07 CWE-303

TI-2024-27868 CVE-2024-41828 · GHSA-54pm-mxvc-pw27

LOW 29

In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00283 Published 2024-07-22 Fixed in 2024.07 CWE-208

TI-2024-27867 CVE-2024-41827 · GHSA-63gw-9jw7-v975

MEDIUM 43

In JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or expiration

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00404 Published 2024-07-22 Fixed in 2024.07 CWE-613

TI-2024-27866 CVE-2024-41826 · GHSA-cwqg-24rf-cjwq

LOW 22

In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00296 Published 2024-07-22 Fixed in 2024.07 CWE-79

TI-2024-27865 CVE-2024-41825 · GHSA-xwcg-xmmg-hh8r

LOW 24

In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00267 Published 2024-07-22 Fixed in 2024.07 CWE-79

TI-2024-27864 CVE-2024-41824 · GHSA-m88w-qcr5-cq82

LOW 29

In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific cases

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00296 Published 2024-07-22 Fixed in 2024.07 CWE-532