CVE-2024-36378

In JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tokens...

CVE-2024-36375

In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed...

CVE-2024-36377

In JetBrains TeamCity before 2024.03.2 certain TeamCity API endpoints did not check user permissions...

CVE-2024-36365

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent...

CVE-2024-36376

JetBrains TeamCity versions prior to 2024.03.2 are affected by an authorization flaw that lets users perform actions they should not be able to, based on their permissions. The issue centers on insufficient authorization within the CI/CD system, potentially enabling privilege escalation. Affected...

CVE-2024-36373

CVE-2024-36373 is a stored XSS vulnerability in JetBrains TeamCity identified as affecting the product before version 2024.03.2, arising from untrusted builds settings that fail to properly filter/escape user-supplied data. Public sources consistently describe an ability to inject script/HTML via...

PT-2024-3958 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.03.2 Description: The issue is related to the use of incorrect authentication tokens due to unlimited resource allocation, which can lead to a denial of service. This can be exploited by a remote...

PT-2024-3966 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.03.2 Description: The issue is related to insufficient authorization procedures in the continuous integration and continuous delivery CI/CD system, allowing users to perform actions that should not be...

PT-2024-3963

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2024.03.2 Description The issue is related to the lack of protection of the web page structure in the JetBrains TeamCity continuous integration and delivery CI/CD system. This can be exploited by a remote...

PT-2024-3967 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.03.2 Description: The issue is related to insufficient authorization procedures in JetBrains TeamCity, a continuous integration and continuous delivery CI/CD system. This allows a remote attacker to...