Jetbrains: >> Teamcity >> 2.0 Security Vulnerabilities
The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fixed in JetBrains TeamCity 2018.2.3.
CVSS Score
5.3
EPSS Score
0.009
Published
2019-07-03
A user without the required permissions could gain access to some JetBrains TeamCity settings. The issue was fixed in TeamCity 2018.2.2.
CVSS Score
4.3
EPSS Score
0.008
Published
2019-07-03
Cross-site scripting (XSS) vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to inject arbitrary web script or HTML via the cameFromUrl parameter to feed/generateFeedUrl.html.
CVSS Score
4.3
EPSS Score
0.019
Published
2015-01-13
Unspecified vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to obtain sensitive information via unknown vectors.
CVSS Score
5.0
EPSS Score
0.012
Published
2015-01-13
Page 27