Show filters
456 Total Results
Displaying 81-90 of 456
Sort by:
Attacker Value
Unknown

CVE-2024-36369

Disclosure Date: May 29, 2024 (last updated December 18, 2024)
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via issue tracker integration was possible
Attacker Value
Unknown

CVE-2024-36368

Disclosure Date: May 29, 2024 (last updated December 18, 2024)
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possible
Attacker Value
Unknown

CVE-2024-36367

Disclosure Date: May 29, 2024 (last updated December 18, 2024)
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party reports was possible
Attacker Value
Unknown

CVE-2024-36366

Disclosure Date: May 29, 2024 (last updated December 18, 2024)
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering operations
Attacker Value
Unknown

CVE-2024-36365

Disclosure Date: May 29, 2024 (last updated December 18, 2024)
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent
Attacker Value
Unknown

CVE-2024-36364

Disclosure Date: May 29, 2024 (last updated December 18, 2024)
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was possible
Attacker Value
Unknown

CVE-2024-36363

Disclosure Date: May 29, 2024 (last updated December 18, 2024)
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 several Stored XSS in code inspection reports were possible
Attacker Value
Unknown

CVE-2024-36362

Disclosure Date: May 29, 2024 (last updated December 18, 2024)
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible
Attacker Value
Unknown

CVE-2024-35302

Disclosure Date: May 16, 2024 (last updated December 18, 2024)
In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possible
Attacker Value
Unknown

CVE-2024-35301

Disclosure Date: May 16, 2024 (last updated December 18, 2024)
In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token