Vulnerabilities

TI-2024-29404 CVE-2024-43810 · GHSA-wm2h-r2j5-8pjc

In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin

LOW 24

In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00267 Published 2024-08-16 Fixed in 2024.07.1 CWE-79

TI-2024-29403 CVE-2024-43809 · GHSA-w2ww-w274-8rxv

LOW 27

In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00328 Published 2024-08-16 Fixed in 2024.07.1 CWE-79

TI-2024-29402 CVE-2024-43808 · GHSA-25rw-wcg9-79jh

LOW 24

In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00238 Published 2024-08-16 Fixed in 2024.07.1 CWE-79

TI-2024-29401 CVE-2024-43807 · GHSA-c856-w373-jm6c

LOW 24

In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00311 Published 2024-08-16 Fixed in 2024.07.1 CWE-79