Vulnerabilities

TI-2025-35630 CVE-2025-57734 · GHSA-gr5r-wc3p-j783

In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files

LOW 30

In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00805 Published 2025-08-20 Fixed in 2025.07.1 CWE-538

TI-2025-35629 CVE-2025-57733 · GHSA-8r4m-wppc-26j3

LOW 25

In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email content

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00278 Published 2025-08-20 Fixed in 2025.07.1 CWE-77

TI-2025-35628 CVE-2025-57732 · GHSA-rp5p-4fx2-gcxg

LOW 34

In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership

CVSS 3.1HIGH 7.5 Local Low privileges No interaction EPSS 0.00119 Published 2025-08-20 Fixed in 2025.07.1 CWE-282