JetBrains

Teamcity

243 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-31138

  • EPSS 88.35%
  • Published 28.03.2024 15:15:47
  • Last modified 21.11.2024 09:12:54

In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings

6.5

CVE-2024-31134

  • EPSS 0.01%
  • Published 28.03.2024 15:15:46
  • Last modified 16.12.2024 15:53:28

In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registration was disabled

7.8

CVE-2024-29880

  • EPSS 0%
  • Published 21.03.2024 14:15:10
  • Last modified 16.12.2024 15:37:50

In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running the agent process

4.3

CVE-2024-28173

  • EPSS 0.01%
  • Published 06.03.2024 17:15:11
  • Last modified 16.12.2024 15:11:43

In JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password" type could be disclosed

5.8

CVE-2024-28174

  • EPSS 0.01%
  • Published 06.03.2024 17:15:11
  • Last modified 16.12.2024 15:07:02

In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized improperly

9.8

CVE-2024-27198

Warning Media report
  • EPSS 94.58%
  • Published 04.03.2024 18:15:09
  • Last modified 29.11.2024 16:25:32

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

7.3

CVE-2024-27199

Media report
  • EPSS 94.49%
  • Published 04.03.2024 18:15:09
  • Last modified 30.05.2025 17:15:26

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

5.3

CVE-2024-24942

  • EPSS 0.09%
  • Published 06.02.2024 10:15:11
  • Last modified 21.11.2024 09:00:01

In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives

5.3

CVE-2024-24938

  • EPSS 0.01%
  • Published 06.02.2024 10:15:10
  • Last modified 21.11.2024 09:00:00

In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation

9.8

CVE-2024-23917

  • EPSS 94.42%
  • Published 06.02.2024 10:15:09
  • Last modified 21.11.2024 08:58:42

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible