Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Release: JetBrains TeamCity 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 Clear all filters
TI-2024-24249 CVE-2024-36470

Authentication bypass in JetBrains TeamCity

Priority MEDIUM 43

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00465 Published 2024-05-29 Fixed in 2022.04.7, 2022.10.6 +2 CWE-288
TI-2024-24162 CVE-2024-36370

Cross-site scripting in JetBrains TeamCity

Priority LOW 24

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possible

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00267 Published 2024-05-29 Fixed in 2022.04.7, 2022.10.6 +2 CWE-79
TI-2024-24161 CVE-2024-36369

Cross-site scripting in JetBrains TeamCity

Priority LOW 24

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via issue tracker integration was possible

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00267 Published 2024-05-29 Fixed in 2022.04.7, 2022.10.6 +2 CWE-79
TI-2024-24160 CVE-2024-36368

Cross-site scripting in JetBrains TeamCity

Priority LOW 24

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possible

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00267 Published 2024-05-29 Fixed in 2022.04.7, 2022.10.6 +2 CWE-79
TI-2024-24158 CVE-2024-36366

Cross-site scripting in JetBrains TeamCity

Priority LOW 27

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering operations

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00282 Published 2024-05-29 Fixed in 2022.04.7, 2022.10.6 +2 CWE-79
TI-2024-24156 CVE-2024-36364

Incorrect authorization in JetBrains TeamCity

Priority LOW 29

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was possible

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0033 Published 2024-05-29 Fixed in 2022.04.7, 2022.10.6 +2 CWE-863
TI-2024-24155 CVE-2024-36363

Cross-site scripting in JetBrains TeamCity

Priority LOW 24

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 several Stored XSS in code inspection reports were possible

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00267 Published 2024-05-29 Fixed in 2022.04.7, 2022.10.6 +2 CWE-79