Vulnerabilities > Jetbrains > Teamcity

DATE CVE VULNERABILITY TITLE RISK
2023-02-23 CVE-2022-48343 Cross-site Scripting vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.
network
low complexity
jetbrains CWE-79
6.1
2023-02-23 CVE-2022-48344 Cross-site Scripting vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process.
network
low complexity
jetbrains CWE-79
6.1
2022-12-08 CVE-2022-46830 Server-Side Request Forgery (SSRF) vulnerability in Jetbrains Teamcity 2022.10/2022.10.1
In JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning.
network
low complexity
jetbrains CWE-918
5.3
2022-12-08 CVE-2022-46831 Insecure Default Initialization of Resource vulnerability in Jetbrains Teamcity 2022.10/2022.10.1
In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.
network
low complexity
jetbrains CWE-1188
4.9
2022-11-03 CVE-2022-44622 Unspecified vulnerability in Jetbrains Teamcity
In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive
network
low complexity
jetbrains
5.3
2022-11-03 CVE-2022-44623 Unspecified vulnerability in Jetbrains Teamcity
In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner settings
network
low complexity
jetbrains
7.5
2022-11-03 CVE-2022-44624 Information Exposure Through Log Files vulnerability in Jetbrains Teamcity
In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters
network
low complexity
jetbrains CWE-532
7.5
2022-11-03 CVE-2022-44646 Unspecified vulnerability in Jetbrains Teamcity
In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settings
network
low complexity
jetbrains
5.3
2022-09-23 CVE-2022-40979 Information Exposure Through Log Files vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable
network
low complexity
jetbrains CWE-532
5.3
2022-08-10 CVE-2022-38133 Information Exposure Through Log Files vulnerability in Jetbrains Teamcity
In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases
network
low complexity
jetbrains CWE-532
5.3