CVE-2024-47161

In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API...

PT-2024-7657 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07.3 Description: The issue is related to stored XSS in the Backup configuration settings of JetBrains TeamCity. This could allow a remote attacker to perform cross-site scripting. Recommendations: Fo...

PT-2024-7444 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07.3 Description: The issue is related to path traversal errors in the handling of relative directory paths, which could allow a remote attacker to disclose protected information using server backups...