JetBrains ≫ Teamcity

243 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

5.4

CVE-2022-24339

JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS.

9.8

In JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was possible.

7.5

In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the edited user.

8.8

In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.

6.1

In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible.

9.8

In JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible.

9.8

In JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases.

5.3

In JetBrains TeamCity before 2021.1.3, a newly created project could take settings from an already deleted project.

9.8

In JetBrains TeamCity before 2021.1.2, remote code execution via the agent push functionality is possible.

5.3

In JetBrains TeamCity before 2021.1.2, user enumeration was possible.