CVE-2022-24338

JetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS...

Security Bulletin: Operations Dashboard is vulnerable to multiple vulnerabilities in Golang

Summary Operations Dashboard is vulnerable to multiple vulnerabilities in Golang which is used by the Operations Dashboard operator. Vulnerabilities include code injection and denial of service. IBM has addressed the vulnerabilities. Vulnerability Details CVEID:CVE-2023-24539 DESCRIPTION: Go is...

CVE-2022-24336

In JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via an XML-RPC request to the TeamCity server...

CVE-2022-24338

JetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS...

CVE-2022-24340

In JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was possible...

CVE-2022-24339

JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS...

CVE-2022-24339

JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS...

CVE-2022-24338

JetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS...

CVE-2022-24341

In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the edited user...

CVE-2022-24334

In JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private key on the server...

CVE-2022-24330

In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible...

CVE-2022-24330

In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible...

CVE-2022-24339

JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS...

CVE-2022-24338

CVE-2022-24338 applies to JetBrains TeamCity: the vulnerability is a reflected XSS issue in TeamCity prior to 2021.2.1. Public sources (CNVD-2022-15942) describe XSS that could be exploited to steal cookie-based authentication credentials. The JetBrains Security Bulletin Q4 2021 lists TeamCity is...

CVE-2022-24338

JetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS...

PT-2022-16619 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2021.2.1 Description: The issue allows an unauthenticated attacker to cancel running builds via an XML-RPC request to the TeamCity server. Recommendations: For versions prior to 2021.2.1, update to version...