Advisories · Technology

JetBrains TeamCity.

Every CVE that names JetBrains TeamCity among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-52877 CVE record

CVSS 4.8 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 23 Jun 2025
CVE-2025-52876 CVE record

CVSS 5.4 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 23 Jun 2025
CVE-2025-52875 CVE record

CVSS 5.4 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 23 Jun 2025
CVE-2025-47854 CVE record

CVSS 4.3 Medium

Open redirect in JetBrains TeamCity
- JetBrains TeamCity
- Open redirect
Not analysed yet 20 May 2025
CVE-2025-47853 CVE record

CVSS 4.8 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 20 May 2025
CVE-2025-47852 CVE record

CVSS 4.8 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 20 May 2025
CVE-2025-47851 CVE record

CVSS 4.8 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 20 May 2025
CVE-2025-46618 CVE record

CVSS 3.5 Low

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 25 Apr 2025
CVE-2025-46433 CVE record

CVSS 4.9 Medium

Path traversal in JetBrains TeamCity
- JetBrains TeamCity
- Path traversal
Not analysed yet 25 Apr 2025
CVE-2025-46432 CVE record

CVSS 4.3 Medium

Sensitive information in log files in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 25 Apr 2025
CVE-2025-31141 CVE record

CVSS 2.7 Low

Sensitive information in error messages in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 27 Mar 2025
CVE-2025-31140 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2025
CVE-2025-31139 CVE record

CVSS 4.3 Medium

Sensitive information in log files in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 27 Mar 2025
CVE-2025-26492 CVE record

CVSS 7.7 High

Insufficiently protected credentials in JetBrains TeamCity
- JetBrains TeamCity
- Hard-coded credentials
Not analysed yet 11 Feb 2025
CVE-2025-26493 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 11 Feb 2025
CVE-2025-24461 CVE record

CVSS 6.5 Medium

Missing authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 21 Jan 2025
CVE-2025-24460 CVE record

CVSS 4.3 Medium

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 21 Jan 2025
CVE-2025-24459 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 21 Jan 2025
CVE-2024-56356 CVE record

CVSS 5.9 Medium

XML external entity injection in JetBrains TeamCity
- JetBrains TeamCity
- XML external entities (XXE)
Not analysed yet 20 Dec 2024
CVE-2024-56355 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 20 Dec 2024
CVE-2024-56354 CVE record

CVSS 5.5 Medium

Insufficiently protected credentials in JetBrains TeamCity
- JetBrains TeamCity
- Hard-coded credentials
Not analysed yet 20 Dec 2024
CVE-2024-56353 CVE record

CVSS 5.5 Medium

In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies
- JetBrains TeamCity
- CWE-212
Not analysed yet 20 Dec 2024
CVE-2024-56352 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 20 Dec 2024
CVE-2024-56351 CVE record

CVSS 6.3 Medium

Insufficient session expiration in JetBrains TeamCity
- JetBrains TeamCity
- Authentication bypass
Not analysed yet 20 Dec 2024
CVE-2024-56350 CVE record

CVSS 4.3 Medium

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 20 Dec 2024
CVE-2024-56349 CVE record

CVSS 5.3 Medium

Missing authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 20 Dec 2024
CVE-2024-56348 CVE record

CVSS 4.3 Medium

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 20 Dec 2024
CVE-2024-47951 CVE record

CVSS 3.5 Low

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 8 Oct 2024
CVE-2024-47950 CVE record

CVSS 3.5 Low

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 8 Oct 2024
CVE-2024-47949 CVE record

CVSS 4.9 Medium

Path traversal in JetBrains TeamCity
- JetBrains TeamCity
- Path traversal
Not analysed yet 8 Oct 2024
CVE-2024-47948 CVE record

CVSS 4.9 Medium

Path traversal in JetBrains TeamCity
- JetBrains TeamCity
- Path traversal
Not analysed yet 8 Oct 2024
CVE-2024-47161 CVE record

CVSS 4.3 Medium

Insufficiently protected credentials in JetBrains TeamCity
- JetBrains TeamCity
- Hard-coded credentials
Not analysed yet 8 Oct 2024
CVE-2024-43810 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 16 Aug 2024
CVE-2024-43809 CVE record

CVSS 3.5 Low

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 16 Aug 2024
CVE-2024-43808 CVE record

CVSS 3.7 Low

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 16 Aug 2024
CVE-2024-43807 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 16 Aug 2024
CVE-2024-43114 CVE record

CVSS 7.5 High

Incorrect default permissions in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 6 Aug 2024
CVE-2024-41829 CVE record

CVSS 3.5 Low

JetBrains TeamCity: In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen…
- JetBrains TeamCity
- Authentication bypass
Not analysed yet 22 Jul 2024
CVE-2024-41828 CVE record

CVSS 2.6 Low

In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time
- JetBrains TeamCity
- CWE-208
Not analysed yet 22 Jul 2024
CVE-2024-41827 CVE record

CVSS 7.4 High

Insufficient session expiration in JetBrains TeamCity
- JetBrains TeamCity
- Authentication bypass
Not analysed yet 22 Jul 2024
CVE-2024-41826 CVE record

CVSS 3.5 Low

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 22 Jul 2024
CVE-2024-41825 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 22 Jul 2024
CVE-2024-41824 CVE record

CVSS 6.4 Medium

Sensitive information in log files in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 22 Jul 2024
CVE-2024-39879 CVE record

CVSS 5.0 Medium

Insufficiently protected credentials in JetBrains TeamCity
- JetBrains TeamCity
- Hard-coded credentials
Not analysed yet 1 Jul 2024
CVE-2024-39878 CVE record

CVSS 4.1 Medium

Insufficiently protected credentials in JetBrains TeamCity
- JetBrains TeamCity
- Hard-coded credentials
Not analysed yet 1 Jul 2024
CVE-2024-36470 CVE record

CVSS 8.1 High

Authentication bypass in JetBrains TeamCity
- JetBrains TeamCity
- Authentication bypass
Not analysed yet 29 May 2024
CVE-2024-36378 CVE record

CVSS 5.9 Medium

Resource allocation without limits in JetBrains TeamCity
- JetBrains TeamCity
- Denial of service
Not analysed yet 29 May 2024
CVE-2024-36377 CVE record

CVSS 6.5 Medium

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 29 May 2024
CVE-2024-36376 CVE record

CVSS 6.5 Medium

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 29 May 2024
CVE-2024-36375 CVE record

CVSS 5.3 Medium

Sensitive information in error messages in JetBrains TeamCity
- JetBrains TeamCity
- Information disclosure
Not analysed yet 29 May 2024
CVE-2024-36374 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2024
CVE-2024-36373 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2024
CVE-2024-36372 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2024
CVE-2024-36371 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2024
CVE-2024-36370 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2024
CVE-2024-36369 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2024
CVE-2024-36368 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2024
CVE-2024-36367 CVE record

CVSS 4.6 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2024
CVE-2024-36366 CVE record

CVSS 5.4 Medium

Cross-site scripting in JetBrains TeamCity
- JetBrains TeamCity
- Cross-site scripting (XSS)
Not analysed yet 29 May 2024
CVE-2024-36365 CVE record

CVSS 6.8 Medium

Incorrect authorization in JetBrains TeamCity
- JetBrains TeamCity
- Broken access control
Not analysed yet 29 May 2024