Jetbrains: >> Teamcity >> 9.1.3 Security Vulnerabilities
In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings.
CVSS Score
2.7
EPSS Score
0.0
Published
2020-04-22
In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages.
CVSS Score
7.5
EPSS Score
0.0
Published
2020-04-22
In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session.
CVSS Score
7.5
EPSS Score
0.0
Published
2020-04-22
In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the settings.kts file.
CVSS Score
6.5
EPSS Score
0.0
Published
2020-04-22
JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role.
CVSS Score
5.4
EPSS Score
0.0
Published
2020-01-30
In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS.
CVSS Score
6.1
EPSS Score
0.0
Published
2020-01-30
In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages.
CVSS Score
4.3
EPSS Score
0.0
Published
2020-01-30
In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI.
CVSS Score
7.5
EPSS Score
0.0
Published
2020-01-30
In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions.
CVSS Score
5.3
EPSS Score
0.0
Published
2019-10-31
In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages.
CVSS Score
4.3
EPSS Score
0.0
Published
2019-10-31