Skip to content
OpenAdvisories
Medium WID-SEC-2025-1380 5 CVEs

JetBrains TeamCity: Mehrere Schwachstellen

Published Jun 23, 2025 · Updated Jun 23, 2025 · de-DE

Vendor: JetBrains Product: TeamCity Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in JetBrains TeamCity ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um Informationen offenzulegen.

Product

TeamCity ist ein Continuous Integration und Deployment Tool für Entwickler und DevOps Ingenieure.

Vulnerabilities 5

  • Medium 5.4
    CVE-2025-52875

    In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possible

    JetBrains TeamCity
  • Medium 5.4
    CVE-2025-52876 EPSS 39%

    In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible

    JetBrains TeamCity
  • Medium 4.8
    CVE-2025-52877 EPSS 37%

    In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possible

    JetBrains TeamCity
  • Medium 4.8
    CVE-2025-52879

    In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possible

    JetBrains TeamCity
  • Medium 4.3
    CVE-2025-52878

    In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissions

    JetBrains TeamCity

Revision history

  1. #1

    Initiale Fassung

References