Vulnerabilities

TI-2025-32915 CVE-2025-52879 · GHSA-rqjm-3cqx-rmhp

In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible

LOW 24

In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01194 Published 2025-06-23 Fixed in 2025.03.3 CWE-79

TI-2025-32914 CVE-2025-52878 · GHSA-72wf-v983-qc36

LOW 20

In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00361 Published 2025-06-23 Fixed in 2025.03.3 CWE-862

TI-2025-32913 CVE-2025-52877 · GHSA-vq9w-vqhr-x7qh

MEDIUM 48

In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.36966 Published 2025-06-23 Fixed in 2025.03.3 CWE-79

TI-2025-32912 CVE-2025-52876 · GHSA-vcp6-7gvp-w68h

MEDIUM 51

In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.38598 Published 2025-06-23 Fixed in 2025.03.3 CWE-79

TI-2025-32911 CVE-2025-52875 · GHSA-4348-ggrm-4839

LOW 26

In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01003 Published 2025-06-23 Fixed in 2025.03.3 CWE-79