CVE-2025-68162

In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration...

CVE-2025-68162

In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration...

EUVD-2025-203768

In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration...

CVE-2025-68162

JetBrains TeamCity: CVE-2025-68162 affects the maven embedder in TeamCity versions before 2025.11, allowing loading of extensions via project configuration. The published metrics indicate a low overall severity (CVSS 3.1: Confidentiality None, Integrity Low, Availability None; Privileges Required...

CVE-2025-68162

In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration...

CVE-2025-68162

In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration...

JetBrains TeamCity security vulnerabilities

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A security vulnerability exists in JetBrains TeamCity...

CVE-2025-68162: Inclusion of Functionality from Untrusted Control Sphere

In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration...

PT-2025-51713

In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration...

com.day.jcr.vault:content-package-maven-plugin (0.0.19), org.apache.maven:maven-embedder (2.0.1) +9 more potentially affected by CVE-2021-26291 via org.apache.maven:maven-core (2.0.1)

org.apache.maven:maven-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven:maven-core and may be impacted: - com.day.jcr.vault:content-package-maven-plugin 0.0.19 - org.apache.maven:maven-embedder 2.0.1 -...

org.apache.maven:maven-embedder (2.0.3) potentially affected by CVE-2021-26291 via org.apache.maven:maven-core (2.0.3)

org.apache.maven:maven-core MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.maven:maven-core and may be impacted: - org.apache.maven:maven-embedder 2.0.3 Source cves: CVE-2021-26291 Source advisory: OSV:GHSA-2F88-5HG8-9X2...