Skip to content
OpenAdvisories
High WID-SEC-2024-3102 5 CVEs

JetBrains TeamCity: Mehrere Schwachstellen

Published Oct 7, 2024 · Updated Oct 7, 2024 · de-DE

Vendor: JetBrains Product: TeamCity Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in JetBrains TeamCity ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff durchzuführen.

Product

TeamCity ist ein Continuous Integration und Deployment Tool für Entwickler und DevOps Ingenieure.

Vulnerabilities 5

  • Medium 4.9
    CVE-2024-47948

    In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups

    JetBrains TeamCity
  • Medium 4.9
    CVE-2024-47949 EPSS 32%

    In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location

    JetBrains TeamCity
  • Medium 4.3
    CVE-2024-47161

    In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API

    JetBrains TeamCity
  • Low 3.5
    CVE-2024-47950

    In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings

    JetBrains TeamCity
  • Low 3.5
    CVE-2024-47951

    In JetBrains TeamCity before 2024.07.3 stored XSS was possible via server global settings

    JetBrains TeamCity

Revision history

  1. #1

    Initiale Fassung

References