Vulnerabilities

TI-2025-41438 CVE-2025-67742 · GHSA-f2j5-wgx4-95h9

In JetBrains TeamCity before 2025.11 path traversal was possible via file upload

LOW 34

In JetBrains TeamCity before 2025.11 path traversal was possible via file upload

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00805 Published 2025-12-11 Fixed in 2025.11 CWE-22

TI-2025-41437 CVE-2025-67741 · GHSA-h5qj-wgvq-xp82

LOW 25

In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2025-12-11 Fixed in 2025.11 CWE-79

TI-2025-41436 CVE-2025-67740 · GHSA-77hx-24qc-vjx9

LOW 23

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0022 Published 2025-12-11 Fixed in 2025.11 CWE-863