Jetbrains: >> Teamcity >> 2023.11.2 Security Vulnerabilities
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was possible
CVSS Score
6.5
EPSS Score
0.003
Published
2024-05-29
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent
CVSS Score
6.8
EPSS Score
0.003
Published
2024-05-29
In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token
CVSS Score
5.5
EPSS Score
0.003
Published
2024-05-16
In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector
CVSS Score
5.9
EPSS Score
0.005
Published
2024-03-28
In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing tools
CVSS Score
4.1
EPSS Score
0.004
Published
2024-03-28
In JetBrains TeamCity before 2024.03 open redirect was possible on the login page
CVSS Score
6.1
EPSS Score
0.005
Published
2024-03-28
In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter
CVSS Score
7.4
EPSS Score
0.005
Published
2024-03-28
In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration
CVSS Score
6.8
EPSS Score
0.004
Published
2024-03-28
In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings
CVSS Score
4.6
EPSS Score
0.745
Published
2024-03-28
In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registration was disabled
CVSS Score
6.5
EPSS Score
0.004
Published
2024-03-28