Show filters
456 Total Results
Displaying 11-20 of 456
Sort by:
Attacker Value
Unknown

CVE-2025-24459

Disclosure Date: January 21, 2025 (last updated January 31, 2025)
In JetBrains TeamCity before 2024.12.1 reflected XSS was possible on the Vault Connection page
Attack Vector: NetworkPrivileges: NoneUser Interaction: Required
0
0
Attacker Value
Unknown

CVE-2025-24458

Disclosure Date: January 21, 2025 (last updated January 31, 2025)
In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration
Attack Vector: LocalPrivileges: NoneUser Interaction: Required
0
0
Attacker Value
Unknown

CVE-2025-24457

Disclosure Date: January 21, 2025 (last updated January 31, 2025)
In JetBrains YouTrack before 2024.3.55417 permanent tokens could be exposed in logs
Attack Vector: LocalPrivileges: LowUser Interaction: None
0
0
Attacker Value
Unknown

CVE-2025-24456

Disclosure Date: January 21, 2025 (last updated January 31, 2025)
In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping
Attack Vector: NetworkPrivileges: LowUser Interaction: None
0
0
Attacker Value
Unknown

CVE-2024-56356

Disclosure Date: December 20, 2024 (last updated January 07, 2025)
In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack
Attack Vector: NetworkPrivileges: LowUser Interaction: None
0
0
Attacker Value
Unknown

CVE-2024-56355

Disclosure Date: December 20, 2024 (last updated January 07, 2025)
In JetBrains TeamCity before 2024.12 missing Content-Type header in RemoteBuildLogController response could lead to XSS
Attack Vector: NetworkPrivileges: LowUser Interaction: Required
0
0
Attacker Value
Unknown

CVE-2024-56354

Disclosure Date: December 20, 2024 (last updated January 07, 2025)
In JetBrains TeamCity before 2024.12 password field value were accessible to users with view settings permission
Attack Vector: NetworkPrivileges: HighUser Interaction: None
0
0
Attacker Value
Unknown

CVE-2024-56353

Disclosure Date: December 20, 2024 (last updated January 07, 2025)
In JetBrains TeamCity before 2024.12 backup file exposed user credentials and session cookies
Attack Vector: NetworkPrivileges: LowUser Interaction: None
0
0
Attacker Value
Unknown

CVE-2024-56352

Disclosure Date: December 20, 2024 (last updated January 07, 2025)
In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page
Attack Vector: NetworkPrivileges: LowUser Interaction: Required
0
0
Attacker Value
Unknown

CVE-2024-56351

Disclosure Date: December 20, 2024 (last updated January 07, 2025)
In JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user roles
Attack Vector: NetworkPrivileges: LowUser Interaction: None
0
0
View More Topics  < Previous  Next >