Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in JetBrains TeamCity ausnutzen, um Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff durchzuführen.
Product
TeamCity ist ein Continuous Integration und Deployment Tool für Entwickler und DevOps Ingenieure.
Vulnerabilities 3
-
Medium 5.3
In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation
-
Medium 4.6
In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible
-
Medium 4.3
In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed
Revision history
-
#1
Initiale Fassung
References
-
JetBrainsFixed security issues vom 2024-02-06
https://www.jetbrains.com/privacy-security/issues-fixed/
-
GitHub Advisory Database vom 2024-02-06
https://github.com/advisories/GHSA-4w42-hx2p-m2jw
-
GitHub Advisory Database vom 2024-02-06
https://github.com/advisories/GHSA-9rvg-5948-h2q2
-
GitHub Advisory Database vom 2024-02-06
https://github.com/advisories/GHSA-m4jj-vwgj-qpjf