Skip to content
OpenAdvisories
High WID-SEC-2024-1254 30 CVEs

JetBrains TeamCity: Mehrere Schwachstellen

Published May 30, 2024 · Updated May 30, 2024 · de-DE

Vendor: JetBrains Product: TeamCity Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JetBrains TeamCity ausnutzen, um beliebigen Code auszuführen, um einen Cross-Site Scripting Angriff durchzuführen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen und Dateien zu manipulieren.

Product

TeamCity ist ein Continuous Integration und Deployment Tool für Entwickler und DevOps Ingenieure.

Vulnerabilities 30

  • High 8.1
    CVE-2024-36470

    In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific …

    JetBrains TeamCity
  • High 7.4
    CVE-2024-31136

    In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter

    JetBrains TeamCity
  • Medium 6.8
    CVE-2024-31137

    In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration

    JetBrains TeamCity
  • Medium 6.8
    CVE-2024-36365

    In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonat…

    JetBrains TeamCity
  • Medium 6.5
    CVE-2024-31134

    In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users …

    JetBrains TeamCity
  • Medium 6.5
    CVE-2024-36362

    In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read file…

    JetBrains TeamCity
  • Medium 6.5
    CVE-2024-36364

    In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Co…

    JetBrains TeamCity
  • Medium 6.5
    CVE-2024-36376

    In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their …

    JetBrains TeamCity
  • Medium 6.5
    CVE-2024-36377

    In JetBrains TeamCity before 2024.03.2 certain TeamCity API endpoints did not check user permissions

    JetBrains TeamCity
  • Medium 6.1
    CVE-2024-31135

    In JetBrains TeamCity before 2024.03 open redirect was possible on the login page

    JetBrains TeamCity
  • Medium 5.9
    CVE-2024-31139

    In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector

    JetBrains TeamCity
  • Medium 5.9
    CVE-2024-35299

    In JetBrains YouTrack before 2024.1.29548 the SMTPS protocol communication lacked proper certificate hostname validation

    JetBrains YouTrack
  • Medium 5.9
    CVE-2024-36378

    In JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tokens

    JetBrains TeamCity
  • Medium 5.5
    CVE-2024-35301

    In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token

    JetBrains TeamCity
  • Medium 5.4
    CVE-2024-35302

    In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possible

    JetBrains TeamCity
  • Medium 5.4
    CVE-2024-36366

    In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report gro…

    JetBrains TeamCity
  • Medium 5.3
    CVE-2024-36375

    In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed

    JetBrains TeamCity
  • Medium 4.6
    CVE-2024-31138 EPSS 75%

    In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings

    JetBrains TeamCity
  • Medium 4.6
    CVE-2024-36363

    In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 several Stored XSS in code inspection reports w…

    JetBrains TeamCity
  • Medium 4.6
    CVE-2024-36367

    In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party reports was possible

    JetBrains TeamCity
  • Medium 4.6
    CVE-2024-36368

    In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration …

    JetBrains TeamCity
  • Medium 4.6
    CVE-2024-36369

    In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via issue tracker integration was po…

    JetBrains TeamCity
  • Medium 4.6
    CVE-2024-36370

    In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was po…

    JetBrains TeamCity
  • Medium 4.6
    CVE-2024-36371

    In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possible

    JetBrains TeamCity
  • Medium 4.6
    CVE-2024-36372

    In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible

    JetBrains TeamCity
  • Medium 4.6
    CVE-2024-36373

    In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible

    JetBrains TeamCity
  • Medium 4.6
    CVE-2024-36374

    In JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possible

    JetBrains TeamCity
  • Medium 4.2
    CVE-2024-29880

    In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user runnin…

    JetBrains TeamCity
  • Medium 4.1
    CVE-2024-31140

    In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing t…

    JetBrains TeamCity
  • Low 3.5
    CVE-2024-35300

    In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible

    JetBrains TeamCity

Revision history

  1. #1

    Initiale Fassung

References