Advisories · Technology

JetBrains TeamCity.

Every CVE that names JetBrains TeamCity among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-36364 CVE record

CVSS 6.5 Medium

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 29 May 2024
CVE-2024-36363 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2024
CVE-2024-36362 CVE record

CVSS 6.5 Medium

Path traversal in JetBrains TeamCity
- JetBrains TeamCity
- Path traversal
Not analysed yet 29 May 2024
CVE-2024-35302 CVE record

CVSS 5.4 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 16 May 2024
CVE-2024-35301 CVE record

CVSS 5.5 Medium

JetBrains TeamCity: In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope…
- JetBrains TeamCity
- CWE-280
Not analysed yet 16 May 2024
CVE-2024-35300 CVE record

CVSS 3.5 Low

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 16 May 2024
CVE-2024-31140 CVE record

CVSS 4.1 Medium

JetBrains TeamCity: In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files…
- JetBrains TeamCity
- CWE-1288
Not analysed yet 28 Mar 2024
CVE-2024-31139 CVE record

CVSS 5.9 Medium

XML external entity injection in JetBrains TeamCity
- JetBrains TeamCity
- XML external entities (XXE)
Not analysed yet 28 Mar 2024
CVE-2024-31138 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2024
CVE-2024-31137 CVE record

CVSS 6.8 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2024
CVE-2024-31136 CVE record

CVSS 7.4 High

In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter
- JetBrains TeamCity
- CWE-1288
Not analysed yet 28 Mar 2024
CVE-2024-31135 CVE record

CVSS 6.1 Medium

Open redirect in JetBrains TeamCity
- JetBrains TeamCity
- Open redirect
Not analysed yet 28 Mar 2024
CVE-2024-31134 CVE record

CVSS 6.5 Medium

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 28 Mar 2024
CVE-2024-29880 CVE record

CVSS 4.2 Medium

JetBrains TeamCity: In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain…
- JetBrains TeamCity
- CWE-749
Not analysed yet 21 Mar 2024
CVE-2024-28174 CVE record

CVSS 5.8 Medium

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 6 Mar 2024
CVE-2024-28173 CVE record

CVSS 4.3 Medium

Information disclosure in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 6 Mar 2024
CVE-2024-27199 CVE record

CVSS 7.3 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Path traversal in JetBrains TeamCity
- JetBrains TeamCity
- Path traversal
Not analysed yet 4 Mar 2024
CVE-2024-27198 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Authentication bypass in JetBrains TeamCity
- JetBrains TeamCity
- Authentication bypass
Not analysed yet 4 Mar 2024
CVE-2024-23917 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Authentication bypass in JetBrains TeamCity
- JetBrains TeamCity
- Authentication bypass
Not analysed yet 6 Feb 2024
CVE-2024-24942 CVE record

CVSS 5.3 Medium

Path traversal in JetBrains TeamCity
- JetBrains TeamCity
- Path traversal
Not analysed yet 6 Feb 2024
CVE-2024-24938 CVE record

CVSS 5.3 Medium

Path traversal in JetBrains TeamCity
- JetBrains TeamCity
- Path traversal
Not analysed yet 6 Feb 2024
CVE-2024-24937 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 6 Feb 2024
CVE-2024-24936 CVE record

CVSS 4.3 Medium

Improper authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 6 Feb 2024
CVE-2023-50870 CVE record

CVSS 4.3 Medium

Cross-site request forgery in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site request forgery (CSRF)
Not analysed yet 15 Dec 2023
CVE-2023-43566 CVE record

CVSS 3.5 Low

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 19 Sept 2023
CVE-2023-42793 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Authentication bypass in JetBrains TeamCity
- JetBrains TeamCity
- Authentication bypass
Not analysed yet 19 Sept 2023
CVE-2023-41250 CVE record

CVSS 3.5 Low

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 25 Aug 2023
CVE-2023-41249 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 25 Aug 2023
CVE-2023-41248 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 25 Aug 2023
CVE-2023-39175 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 25 Jul 2023
CVE-2023-39174 CVE record

CVSS 4.3 Medium

Regular expression denial of service in JetBrains TeamCity
- JetBrains TeamCity
- Denial of service
Not analysed yet 25 Jul 2023
CVE-2023-39173 CVE record

CVSS 5.4 Medium

JetBrains TeamCity: In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to…
- JetBrains TeamCity
- Privilege escalation
Not analysed yet 25 Jul 2023
CVE-2023-38067 CVE record

CVSS 4.3 Medium

Sensitive information in log files in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 12 Jul 2023
CVE-2023-38066 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 12 Jul 2023
CVE-2023-38065 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 12 Jul 2023
CVE-2023-38064 CVE record

CVSS 4.3 Medium

Sensitive information in log files in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 12 Jul 2023
CVE-2023-38063 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 12 Jul 2023
CVE-2023-38062 CVE record

CVSS 4.3 Medium

Information disclosure in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 12 Jul 2023
CVE-2023-38061 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 12 Jul 2023
CVE-2015-1313 CVE record

JetBrains TeamCity: JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions…
- JetBrains TeamCity
Not analysed yet 29 Jun 2023
CVE-2023-34229 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 31 May 2023
CVE-2023-34228 CVE record

CVSS 5.3 Medium

JetBrains TeamCity: In JetBrains TeamCity before 2023.05 authentication checks were missing…
- JetBrains TeamCity
- CWE-308
Not analysed yet 31 May 2023
CVE-2023-34227 CVE record

CVSS 5.3 Medium

In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks
- JetBrains TeamCity
- CWE-749
Not analysed yet 31 May 2023
CVE-2023-34226 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 31 May 2023
CVE-2023-34225 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 31 May 2023
CVE-2023-34224 CVE record

CVSS 4.8 Medium

Open redirect in JetBrains TeamCity
- JetBrains TeamCity
- Open redirect
Not analysed yet 31 May 2023
CVE-2023-34223 CVE record

CVSS 4.3 Medium

Sensitive information in log files in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 31 May 2023
CVE-2023-34222 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 31 May 2023
CVE-2023-34221 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 31 May 2023
CVE-2023-34220 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 31 May 2023
CVE-2023-34219 CVE record

CVSS 4.3 Medium

Improper authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 31 May 2023
CVE-2023-34218 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 31 May 2023
CVE-2022-48428 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2023
CVE-2022-48427 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2023
CVE-2022-48426 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2023
CVE-2022-48344 CVE record

CVSS 5.4 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 23 Feb 2023
CVE-2022-48343 CVE record

CVSS 5.4 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 23 Feb 2023
CVE-2022-48342 CVE record

CVSS 5.2 Medium

In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.
- JetBrains TeamCity
- CWE-1188
Not analysed yet 23 Feb 2023
CVE-2022-46831 CVE record

CVSS 6.6 Medium

JetBrains TeamCity: In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default…
- JetBrains TeamCity
- CWE-453
Not analysed yet 8 Dec 2022
CVE-2022-46830 CVE record

CVSS 4.1 Medium

Server-side request forgery in JetBrains TeamCity
- JetBrains TeamCity
- Server-side request forgery (SSRF)
Not analysed yet 8 Dec 2022