JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a Continuous Integration CI/CD tool that is primarily used to automate the software build, test, and deployment process. JetBrains TeamCity suffers from a cross-site scripting vulnerability that can be exploited by an attacker to display XSS stored on the connection page...

PT-2024-5468 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07 Description: The issue is related to the lack of protection of the web page structure in the Show Connection element of the JetBrains TeamCity continuous integration and delivery CI/CD system. This...

CVE-2023-34221

In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible...

CVE-2023-34229

In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible...

CVE-2023-34221

In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible...

Cross site scripting

In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible...

CVE-2023-34229

In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible...

CVE-2023-34229

In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible...

CVE-2023-34221

CVE-2023-34221 corresponds to a stored XSS vulnerability in JetBrains TeamCity prior to 2023.05, specifically in the Show Connection page. Multiple connected sources confirm the affected product (JetBrains TeamCity), vulnerable component/behavior (stored XSS in Show Connection), and the root caus...

CVE-2023-34221

In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible...

PT-2023-24746 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2023.05 Description: The issue concerns a stored XSS vulnerability in the Show Connection page. This allows for potential malicious script execution. Recommendations: For versions prior to 2023.05, update ...

Design/Logic Flaw

IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in New Data Server Connection page. IBM X-Force ID: 172129...