JetBrains ≫ Teamcity

243 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

5.3

CVE-2021-37547

In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.

7.5

In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS.

7.5

In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible.

6.1

In JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages.

8.8

In JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a password reset.

7.5

In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange.

9.8

In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible.

9.8

In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible.

5.3

In JetBrains TeamCity before 2020.2.2, permission checks for changing TeamCity plugins were implemented improperly.

5.4

In JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages.