CVEs (283)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows |
In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload |
In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition |
In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files |
In JetBrains TeamCity before 2025.07.1 sMTP injection was possible allowing modification of email content |
In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership |
In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command |
In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshots |
In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint |
In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms |
In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset page |
In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration |
In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependencies |
In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows |
In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissions |
In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration |
In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flow |
In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible |
In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions |
In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible |