Teamcity

DATE	CVE	VULNERABILITY TITLE	RISK
2021-05-11	CVE-2021-31913	Improper Validation of Integrity Check Value vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange. network low complexity jetbrains CWE-354	7.5
2021-05-11	CVE-2021-31914	Unspecified vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible. network low complexity jetbrains critical	9.8
2021-05-11	CVE-2021-31915	OS Command Injection vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible. network low complexity jetbrains CWE-78 critical	9.8
2021-05-11	CVE-2021-26309	Exposure of Resource to Wrong Sphere vulnerability in Jetbrains Teamcity Information disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible because a local temporary file had Insecure Permissions. local low complexity jetbrains CWE-668	3.3
2021-05-11	CVE-2021-26310	Unspecified vulnerability in Jetbrains Teamcity In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible. network low complexity jetbrains	7.5
2021-05-11	CVE-2021-31904	Cross-site Scripting vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2020.2.2, XSS was potentially possible on the test history page. network low complexity jetbrains CWE-79	6.1
2021-05-11	CVE-2021-31906	Unspecified vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2020.2.2, audit logs were not sufficient when an administrator uploaded a file. network low complexity jetbrains	2.7
2021-05-11	CVE-2021-31907	Incorrect Permission Assignment for Critical Resource vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2020.2.2, permission checks for changing TeamCity plugins were implemented improperly. network low complexity jetbrains CWE-732	5.3
2021-05-11	CVE-2021-31908	Cross-site Scripting vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages. network low complexity jetbrains CWE-79	5.4
2021-05-11	CVE-2021-31909	Argument Injection or Modification vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible. network low complexity jetbrains CWE-88 critical	9.8