Vulnerabilities

TI-2025-18194 CVE-2025-24461 · GHSA-h9xv-3v8q-frmv

Missing authorization in JetBrains TeamCity

LOW 29

In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00318 Published 2025-01-21 Fixed in 2024.12.1 CWE-862

TI-2025-18193 CVE-2025-24460 · GHSA-c9qq-2xc2-vwcc

LOW 20

In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00278 Published 2025-01-21 Fixed in 2024.12.1 CWE-863

TI-2025-18192 CVE-2025-24459 · GHSA-v33x-q5jf-g6v4

LOW 33

In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02912 Published 2025-01-21 Fixed in 2024.12.1 CWE-79