CVEs (283)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 stored XSS in the classic build log was possible |
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 stored XSS in the classic project overview was possible |
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible |
In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server |
In JetBrains TeamCity before 2026.1.3
2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible |
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 administrator account takeover was possible via password reset |
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings |
In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL |
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol |
In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible |
In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks |
In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible |
In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data |
In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration |
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible |
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible |
In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names |
In JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion |
In JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters |
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin |