Show filters
456 Total Results
Displaying 141-150 of 456
Sort by:
Attacker Value
Unknown

CVE-2023-34228

Disclosure Date: May 31, 2023 (last updated October 08, 2023)
In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actions
Attacker Value
Unknown

CVE-2023-34227

Disclosure Date: May 31, 2023 (last updated October 08, 2023)
In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks
Attacker Value
Unknown

CVE-2023-34226

Disclosure Date: May 31, 2023 (last updated October 08, 2023)
In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible
Attacker Value
Unknown

CVE-2023-34225

Disclosure Date: May 31, 2023 (last updated October 08, 2023)
In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible
Attacker Value
Unknown

CVE-2023-34224

Disclosure Date: May 31, 2023 (last updated October 08, 2023)
In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible
Attacker Value
Unknown

CVE-2023-34223

Disclosure Date: May 31, 2023 (last updated October 08, 2023)
In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases
Attacker Value
Unknown

CVE-2023-34222

Disclosure Date: May 31, 2023 (last updated October 08, 2023)
In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible
Attacker Value
Unknown

CVE-2023-34221

Disclosure Date: May 31, 2023 (last updated October 08, 2023)
In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible
Attacker Value
Unknown

CVE-2023-34220

Disclosure Date: May 31, 2023 (last updated October 08, 2023)
In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible
Attacker Value
Unknown

CVE-2023-34219

Disclosure Date: May 31, 2023 (last updated October 08, 2023)
In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API