CVE ID | Published | Description | Score | Severity |
---|---|---|---|---|
In JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root page | 6.1 |
Medium |
||
In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible | 5.4 |
Medium |
||
In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible | 5.4 |
Medium |
||
In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible | 5.4 |
Medium |
||
In JetBrains TeamCity before 2025.03.1 stored XSS was possible on Data Directory tab | 6.1 |
Medium |
||
In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible | 9.8 |
Critical |
||
In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs | 6.5 |
Medium |
||
In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page | 7.5 |
High |
||
In JetBrains TeamCity before 2025.03 stored XSS was possible on Cloud Profiles page | 6.1 |
Medium |
||
In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log | 6.5 |
Medium |