Vulnerabilities

TI-2024-32194 CVE-2024-47951 · GHSA-r66g-ppwv-4vgw

In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings

LOW 27

In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01409 Published 2024-10-08 Fixed in 2024.07.3 CWE-79

TI-2024-32193 CVE-2024-47950 · GHSA-4c8f-q362-56jq

LOW 27

In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01409 Published 2024-10-08 Fixed in 2024.07.3 CWE-79

TI-2024-32192 CVE-2024-47949 · GHSA-h2p8-f2v7-2g2m

MEDIUM 57

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.32121 Published 2024-10-08 Fixed in 2024.07.3 CWE-23

TI-2024-32191 CVE-2024-47948 · GHSA-r4fg-94jj-wp5g

LOW 34

In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00533 Published 2024-10-08 Fixed in 2024.07.3 CWE-23

TI-2024-31530 CVE-2024-47161 · GHSA-hhc5-m2g9-fxr9

LOW 29

In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00308 Published 2024-10-08 Fixed in 2024.07.3 CWE-522