CVE-2024-56352

In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page...

CVE-2024-56352

In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page...

CVE-2024-56352

In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page...

CVE-2024-56352

In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page...

CVE-2024-56352

JetBrains TeamCity before 2024.12 is affected by a stored XSS vulnerability via the image name on the agent details page. Affected product: JetBrains TeamCity (server-side UI component handling agent details). Root cause: lack of proper encoding/filtering of user-supplied image name data leading ...

CVE-2024-56352

In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page...

EUVD-2024-53121

In JetBrains TeamCity before 2024.12 stored XSS was possible via image name on the agent details page...

CVE-2024-56348

In JetBrains TeamCity before 2024.12 improper access control allowed viewing details of unauthorized agents...

PT-2024-9849 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.12 Description: The issue allows for stored Cross Site Scripting XSS via the image name on the agent details page. This can be exploited by a remote attacker to conduct an inter-site scripting attack...

PT-2024-9845 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.12 Description: The issue is related to improper access control in JetBrains TeamCity, which allowed viewing details of unauthorized agents. This could potentially enable a remote attacker to gain...

CVE-2020-26830

SAP Solution Manager 7.2 User Experience Monitoring, version - 7.2, does not perform necessary authorization checks for an authenticated user. Due to inadequate access control, a network attacker authenticated as a regular user can use operations which should be restricted to administrators. Thes...