Medium · 4.6 CVE-2024-31138 EUVD-2024-29049GHSA-rxxr-85xg-h73w

In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings

Published Mar 28, 2024 · Updated Aug 2, 2024 · Assigned by JetBrains

Vendor: JetBrains Product: TeamCity

Description

In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings

Affected products

Vendor	Product	Affected	Fixed
JetBrains	TeamCity	< 2024.03	2024.03

Advisories 2

WID-SEC-2024-0756 JetBrains TeamCity: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 27, 2024
WID-SEC-2024-1254 JetBrains TeamCity: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 30, 2024

References

https://www.jetbrains.com/privacy-security/issues-fixed/