# JetBrains TeamCity.

Every CVE that names JetBrains TeamCity among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Incorrect authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36364.md)
  `CVE-2024-36364` · CVE record: JetBrains TeamCity · CVSS 6.5 Medium · Not analysed yet · Published 29 May 2024 · Tags: Broken access control
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36363.md)
  `CVE-2024-36363` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 29 May 2024 · Tags: Cross-site scripting (XSS)
- [Path traversal in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-36362.md)
  `CVE-2024-36362` · CVE record: JetBrains TeamCity · CVSS 6.5 Medium · Not analysed yet · Published 29 May 2024 · Tags: Path traversal
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-35302.md)
  `CVE-2024-35302` · CVE record: JetBrains TeamCity · CVSS 5.4 Medium · Not analysed yet · Published 16 May 2024 · Tags: Cross-site scripting (XSS)
- [JetBrains TeamCity: In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope…](https://agentprime.io/advisories/CVE-2024-35301.md)
  `CVE-2024-35301` · CVE record: JetBrains TeamCity · CVSS 5.5 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-280
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-35300.md)
  `CVE-2024-35300` · CVE record: JetBrains TeamCity · CVSS 3.5 Low · Not analysed yet · Published 16 May 2024 · Tags: Cross-site scripting (XSS)
- [JetBrains TeamCity: In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files…](https://agentprime.io/advisories/CVE-2024-31140.md)
  `CVE-2024-31140` · CVE record: JetBrains TeamCity · CVSS 4.1 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: CWE-1288
- [XML external entity injection in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-31139.md)
  `CVE-2024-31139` · CVE record: JetBrains TeamCity · CVSS 5.9 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: XML external entities (XXE)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-31138.md)
  `CVE-2024-31138` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · EPSS 0.75 · Not analysed yet · Published 28 Mar 2024 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-31137.md)
  `CVE-2024-31137` · CVE record: JetBrains TeamCity · CVSS 6.8 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: Cross-site scripting (XSS)
- [In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter](https://agentprime.io/advisories/CVE-2024-31136.md)
  `CVE-2024-31136` · CVE record: JetBrains TeamCity · CVSS 7.4 High · Not analysed yet · Published 28 Mar 2024 · Tags: CWE-1288
- [Open redirect in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-31135.md)
  `CVE-2024-31135` · CVE record: JetBrains TeamCity · CVSS 6.1 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: Open redirect
- [Incorrect authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-31134.md)
  `CVE-2024-31134` · CVE record: JetBrains TeamCity · CVSS 6.5 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: Broken access control
- [JetBrains TeamCity: In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain…](https://agentprime.io/advisories/CVE-2024-29880.md)
  `CVE-2024-29880` · CVE record: JetBrains TeamCity · CVSS 4.2 Medium · Not analysed yet · Published 21 Mar 2024 · Tags: CWE-749
- [Incorrect authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-28174.md)
  `CVE-2024-28174` · CVE record: JetBrains TeamCity · CVSS 5.8 Medium · Not analysed yet · Published 6 Mar 2024 · Tags: Broken access control
- [Information disclosure in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-28173.md)
  `CVE-2024-28173` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 6 Mar 2024 · Tags: Information disclosure
- [Path traversal in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-27199.md)
  `CVE-2024-27199` · CVE record: JetBrains TeamCity · CVSS 7.3 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 4 Mar 2024 · Tags: Path traversal
- [Authentication bypass in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-27198.md)
  `CVE-2024-27198` · CVE record: JetBrains TeamCity · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 4 Mar 2024 · Tags: Authentication bypass
- [Authentication bypass in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-23917.md)
  `CVE-2024-23917` · CVE record: JetBrains TeamCity · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.54 · Not analysed yet · Published 6 Feb 2024 · Tags: Authentication bypass
- [Path traversal in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-24942.md)
  `CVE-2024-24942` · CVE record: JetBrains TeamCity · CVSS 5.3 Medium · EPSS 0.32 · Not analysed yet · Published 6 Feb 2024 · Tags: Path traversal
- [Path traversal in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-24938.md)
  `CVE-2024-24938` · CVE record: JetBrains TeamCity · CVSS 5.3 Medium · Not analysed yet · Published 6 Feb 2024 · Tags: Path traversal
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-24937.md)
  `CVE-2024-24937` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 6 Feb 2024 · Tags: Cross-site scripting (XSS)
- [Improper authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2024-24936.md)
  `CVE-2024-24936` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 6 Feb 2024 · Tags: Broken access control
- [Cross-site request forgery in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-50870.md)
  `CVE-2023-50870` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 15 Dec 2023 · Tags: Cross-site request forgery (CSRF)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-43566.md)
  `CVE-2023-43566` · CVE record: JetBrains TeamCity · CVSS 3.5 Low · Not analysed yet · Published 19 Sept 2023 · Tags: Cross-site scripting (XSS)
- [Authentication bypass in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-42793.md)
  `CVE-2023-42793` · CVE record: JetBrains TeamCity · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 19 Sept 2023 · Tags: Authentication bypass
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-41250.md)
  `CVE-2023-41250` · CVE record: JetBrains TeamCity · CVSS 3.5 Low · Not analysed yet · Published 25 Aug 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-41249.md)
  `CVE-2023-41249` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · EPSS 0.56 · Not analysed yet · Published 25 Aug 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-41248.md)
  `CVE-2023-41248` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 25 Aug 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-39175.md)
  `CVE-2023-39175` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 25 Jul 2023 · Tags: Cross-site scripting (XSS)
- [Regular expression denial of service in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-39174.md)
  `CVE-2023-39174` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 25 Jul 2023 · Tags: Denial of service
- [JetBrains TeamCity: In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to…](https://agentprime.io/advisories/CVE-2023-39173.md)
  `CVE-2023-39173` · CVE record: JetBrains TeamCity · CVSS 5.4 Medium · Not analysed yet · Published 25 Jul 2023 · Tags: Privilege escalation
- [Sensitive information in log files in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-38067.md)
  `CVE-2023-38067` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Information disclosure
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-38066.md)
  `CVE-2023-38066` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-38065.md)
  `CVE-2023-38065` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Cross-site scripting (XSS)
- [Sensitive information in log files in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-38064.md)
  `CVE-2023-38064` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Information disclosure
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-38063.md)
  `CVE-2023-38063` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Cross-site scripting (XSS)
- [Information disclosure in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-38062.md)
  `CVE-2023-38062` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Information disclosure
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-38061.md)
  `CVE-2023-38061` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 12 Jul 2023 · Tags: Cross-site scripting (XSS)
- [JetBrains TeamCity: JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions…](https://agentprime.io/advisories/CVE-2015-1313.md)
  `CVE-2015-1313` · CVE record: JetBrains TeamCity · No CVSS score · Not analysed yet · Published 29 Jun 2023
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-34229.md)
  `CVE-2023-34229` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 31 May 2023 · Tags: Cross-site scripting (XSS)
- [JetBrains TeamCity: In JetBrains TeamCity before 2023.05 authentication checks were missing…](https://agentprime.io/advisories/CVE-2023-34228.md)
  `CVE-2023-34228` · CVE record: JetBrains TeamCity · CVSS 5.3 Medium · Not analysed yet · Published 31 May 2023 · Tags: CWE-308
- [In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks](https://agentprime.io/advisories/CVE-2023-34227.md)
  `CVE-2023-34227` · CVE record: JetBrains TeamCity · CVSS 5.3 Medium · Not analysed yet · Published 31 May 2023 · Tags: CWE-749
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-34226.md)
  `CVE-2023-34226` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 31 May 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-34225.md)
  `CVE-2023-34225` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · EPSS 0.61 · Not analysed yet · Published 31 May 2023 · Tags: Cross-site scripting (XSS)
- [Open redirect in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-34224.md)
  `CVE-2023-34224` · CVE record: JetBrains TeamCity · CVSS 4.8 Medium · Not analysed yet · Published 31 May 2023 · Tags: Open redirect
- [Sensitive information in log files in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-34223.md)
  `CVE-2023-34223` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 31 May 2023 · Tags: Information disclosure
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-34222.md)
  `CVE-2023-34222` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 31 May 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-34221.md)
  `CVE-2023-34221` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 31 May 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-34220.md)
  `CVE-2023-34220` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · EPSS 0.61 · Not analysed yet · Published 31 May 2023 · Tags: Cross-site scripting (XSS)
- [Improper authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-34219.md)
  `CVE-2023-34219` · CVE record: JetBrains TeamCity · CVSS 4.3 Medium · Not analysed yet · Published 31 May 2023 · Tags: Broken access control
- [Incorrect authorization in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2023-34218.md)
  `CVE-2023-34218` · CVE record: JetBrains TeamCity · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 May 2023 · Tags: Broken access control
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2022-48428.md)
  `CVE-2022-48428` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · EPSS 0.68 · Not analysed yet · Published 27 Mar 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2022-48427.md)
  `CVE-2022-48427` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 27 Mar 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2022-48426.md)
  `CVE-2022-48426` · CVE record: JetBrains TeamCity · CVSS 4.6 Medium · Not analysed yet · Published 27 Mar 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2022-48344.md)
  `CVE-2022-48344` · CVE record: JetBrains TeamCity · CVSS 5.4 Medium · Not analysed yet · Published 23 Feb 2023 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2022-48343.md)
  `CVE-2022-48343` · CVE record: JetBrains TeamCity · CVSS 5.4 Medium · EPSS 0.59 · Not analysed yet · Published 23 Feb 2023 · Tags: Cross-site scripting (XSS)
- [In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.](https://agentprime.io/advisories/CVE-2022-48342.md)
  `CVE-2022-48342` · CVE record: JetBrains TeamCity · CVSS 5.2 Medium · Not analysed yet · Published 23 Feb 2023 · Tags: CWE-1188
- [JetBrains TeamCity: In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default…](https://agentprime.io/advisories/CVE-2022-46831.md)
  `CVE-2022-46831` · CVE record: JetBrains TeamCity · CVSS 6.6 Medium · Not analysed yet · Published 8 Dec 2022 · Tags: CWE-453
- [Server-side request forgery in JetBrains TeamCity](https://agentprime.io/advisories/CVE-2022-46830.md)
  `CVE-2022-46830` · CVE record: JetBrains TeamCity · CVSS 4.1 Medium · Not analysed yet · Published 8 Dec 2022 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/technology/jetbrains-teamcity.md>
Older: <https://agentprime.io/advisories/technology/jetbrains-teamcity.md?cursor=WyIyMDIyLTEyLTA4VDE3OjM4OjAzLjQ5OTAwMFoiLCJDVkUtMjAyMi00NjgzMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=jetbrains-teamcity&cursor=WyIyMDI0LTA1LTI5VDEzOjI4OjU5LjQ0NTAwMFoiLCJDVkUtMjAyNC0zNjM2NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/jetbrains-teamcity/?cursor=WyIyMDI0LTA1LTI5VDEzOjI4OjU5LjQ0NTAwMFoiLCJDVkUtMjAyNC0zNjM2NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.