CVE-2025-67741

In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute...

EUVD-2025-202695

In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute...

EUVD-2025-202694

In JetBrains TeamCity before 2025.11 path traversal was possible via file upload...

EUVD-2025-202697

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...

CVE-2025-67740

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata...

CVE-2025-67742

In JetBrains TeamCity before 2025.11 path traversal was possible via file upload...

CVE-2025-67739

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...

CVE-2025-67741

In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute...

CVE-2025-67742

In JetBrains TeamCity before 2025.11 path traversal was possible via file upload...

CVE-2025-67741

In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute...

CVE-2025-67739

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...

CVE-2025-67742

In JetBrains TeamCity before 2025.11 path traversal was possible via file upload...

CVE-2025-67742

In JetBrains TeamCity before 2025.11 path traversal was possible via file upload...

CVE-2025-67741

In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute...

CVE-2025-67741

In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute...

CVE-2025-67741

CVE-2025-67741 : JetBrains TeamCity versions before 2025.11 are affected by a stored XSS vulnerability via a session attribute. Root cause and impact are described in connected advisories; exploitation would involve injecting/script execution within the victim’s browser under the user’s context. ...

CVE-2025-67739

JetBrains TeamCity is affected if running a version prior to 2025.11.2. The CVE-2025-67739 issue is caused by improper validation of repository URLs, which could allow disclosure of local file paths. The Nessus and vendor entries corroborate that older TeamCity builds are vulnerable to local path...

CVE-2025-67740

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata...

CVE-2025-67739

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...

CVE-2025-67739

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure...