CVE-2024-47951

In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings...

CVE-2024-47948

In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups...

CVE-2024-47949

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location...

CVE-2024-47161

In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API...

CVE-2024-47949

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location...

CVE-2024-47950

CVE-2024-47950 affects JetBrains TeamCity prior to 2024.07.3 and corresponds to a stored XSS vulnerability in the Backup configuration settings. The issue arises from handling backup configuration data, enabling an attacker to inject script that could be stored and later executed in a victim’s br...

CVE-2024-47949

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location...

CVE-2024-47948

In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups...

PT-2024-7657 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07.3 Description: The issue is related to stored XSS in the Backup configuration settings of JetBrains TeamCity. This could allow a remote attacker to perform cross-site scripting. Recommendations: Fo...

PT-2024-7443 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07.3 Description: The issue concerns a stored XSS vulnerability in JetBrains TeamCity. This vulnerability exists due to insufficient protection of the web page structure, allowing a remote attacker to...

PT-2024-7444 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07.3 Description: The issue is related to path traversal errors in the handling of relative directory paths, which could allow a remote attacker to disclose protected information using server backups...