Vulnerabilities

TI-2024-16445 CVE-2024-24938 · GHSA-4w42-hx2p-m2jw

In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation

LOW 31

In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00743 Published 2024-02-06 Fixed in 2023.11.2 CWE-23

TI-2024-16444 CVE-2024-24937 · GHSA-9rvg-5948-h2q2

LOW 24

In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0036 Published 2024-02-06 Fixed in 2023.11.2 CWE-79

TI-2024-16443 CVE-2024-24936 · GHSA-m4jj-vwgj-qpjf

LOW 24

In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00307 Published 2024-02-06 Fixed in 2023.11.2 CWE-285