Show filters
211 Total Results
Displaying 131-140 of 211
Sort by:
Attacker Value
Unknown

CVE-2022-24333

Disclosure Date: February 25, 2022 (last updated February 23, 2025)
In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible.
Attacker Value
Unknown

CVE-2022-24332

Disclosure Date: February 25, 2022 (last updated February 23, 2025)
In JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie.
Attacker Value
Unknown

CVE-2022-24331

Disclosure Date: February 25, 2022 (last updated February 23, 2025)
In JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible.
Attacker Value
Unknown

CVE-2022-24330

Disclosure Date: February 25, 2022 (last updated February 23, 2025)
In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible.
Attacker Value
Unknown

CVE-2021-43202

Disclosure Date: November 30, 2021 (last updated October 07, 2023)
In JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases.
Attacker Value
Unknown

CVE-2021-43194

Disclosure Date: November 09, 2021 (last updated November 28, 2024)
In JetBrains TeamCity before 2021.1.2, user enumeration was possible.
Attacker Value
Unknown

CVE-2021-43199

Disclosure Date: November 09, 2021 (last updated February 23, 2025)
In JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are insufficient.
Attacker Value
Unknown

CVE-2021-43198

Disclosure Date: November 09, 2021 (last updated February 23, 2025)
In JetBrains TeamCity before 2021.1.2, stored XSS is possible.
Attacker Value
Unknown

CVE-2021-43201

Disclosure Date: November 09, 2021 (last updated November 28, 2024)
In JetBrains TeamCity before 2021.1.3, a newly created project could take settings from an already deleted project.
Attacker Value
Unknown

CVE-2021-43197

Disclosure Date: November 09, 2021 (last updated February 23, 2025)
In JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.