Jetbrains: >> Teamcity >> 2022.10.1 Security Vulnerabilities
In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible
CVSS Score
4.6
EPSS Score
0.001
Published
2023-03-27
In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible
CVSS Score
4.6
EPSS Score
0.072
Published
2023-03-27
In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.
CVSS Score
5.2
EPSS Score
0.0
Published
2023-02-23
In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.
CVSS Score
5.4
EPSS Score
0.05
Published
2023-02-23
In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process.
CVSS Score
5.4
EPSS Score
0.001
Published
2023-02-23
In JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning.
CVSS Score
4.1
EPSS Score
0.0
Published
2022-12-08
In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.
CVSS Score
6.6
EPSS Score
0.0
Published
2022-12-08
Page 12