EUVD-2023-45766

Malicious code in bioql PyPI...

TeamCity Server < 2023.05.3 Multiple Vulnerabilities

According to its its self-reported version number, the version of JetBrains TeamCity running on the remote host is a version prior to 2023.05.3. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles...

CVE-2023-41249

In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step...

CVE-2023-41250

In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration...

CVE-2023-41248

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...

CVE-2023-41250

JetBrains TeamCity servers prior to 2023.05.3 are affected by a reflected XSS during user registration. The flaw is a reflected cross-site scripting vulnerability in the registration flow; exploitation requirements and precise vectors are not detailed in the provided documents. Impact is disclose...

CVE-2023-41248

JetBrains TeamCity prior to 2023.05.3 is vulnerable to a stored XSS flaw in Cloud Profiles configuration (CVE-2023-41248). Affected product/version: TeamCity before 2023.05.3. Root cause: stored XSS during Cloud Profiles setup. Impact: potential user-impact via crafted input; CVSS base metrics in...

PT-2023-27867 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.05.3 Description: The issue allows for stored XSS during Cloud Profiles configuration. Recommendations: For versions prior to 2023.05.3, update to version 2023.05.3 or later to resolve the issue...

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A cross-site scripting vulnerability exists in JetBrai...