Jetbrains Teamcity vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jetbrains Teamcity: 44 record(s), with affected versions and fixes.cpe:2.3:a:jetbrains:teamcity
CVE-2026-49371
High · 8.2
CWE-79 May 29, 2026
Cross-site Scripting (XSS) in Jetbrains Teamcity
In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible
CVE-2026-44413
High · 7.5
CWE-306 May 11, 2026
In JetBrains TeamCity before 2026.1
2025.11.5 authenticated users could expose server API to...
In JetBrains TeamCity before 2026.1
2025.11.5 authenticated users could expose server API to unauthorised access
CVE-2026-28196
Low · 2.3
CWE-459 Feb 25, 2026
In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials…
In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk
CVE-2026-28195
Medium · 4.3
CWE-862 Feb 25, 2026
Missing Authorization in Jetbrains Teamcity
In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations
CVE-2026-28194
Medium · 6.1
CWE-601 Feb 25, 2026
Open Redirect in Jetbrains Teamcity
In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow
CVE-2025-68268
Medium · 6.1
CWE-79 Dec 16, 2025
Cross-site Scripting (XSS) in Jetbrains Teamcity
In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page
CVE-2025-68267
Medium · 6.5
CWE-272 Dec 16, 2025
In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing…
In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation token
CVE-2025-68166
Medium · 6.1
CWE-79 Dec 16, 2025
Cross-site Scripting (XSS) in Jetbrains Teamcity
In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tab
CVE-2025-68165
Medium · 6.1
CWE-79 Dec 16, 2025
Cross-site Scripting (XSS) in Jetbrains Teamcity
In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup
CVE-2025-68164
Low · 2.7
CWE-203 Dec 16, 2025
Observable Discrepancy in Jetbrains Teamcity
In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test
CVE-2025-68163
Medium · 4.8
CWE-79 Dec 16, 2025
Cross-site Scripting (XSS) in Jetbrains Teamcity
In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page
CVE-2025-68162
Low · 2.7
CWE-829 Dec 16, 2025
In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via…
In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration
CVE-2025-67742
High · 7.5
CWE-22 Dec 11, 2025
Path Traversal in Jetbrains Teamcity
In JetBrains TeamCity before 2025.11 path traversal was possible via file upload
CVE-2025-67741
Medium · 5.4
CWE-79 Dec 11, 2025
Cross-site Scripting (XSS) in Jetbrains Teamcity
In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute
CVE-2025-67740
Medium · 5.3
CWE-863 Dec 11, 2025
Incorrect Authorization in Jetbrains Teamcity
In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata
CVE-2025-67739
Low · 3.1
CWE-939 Dec 11, 2025
In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to…
In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure
CVE-2024-27198
Critical · 9.8
KEV Urgent · 93 Public exploit Ransomware CWE-288 Mar 4, 2024
JetBrains TeamCity Authentication Bypass Vulnerability
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
CVE-2024-27199
High · 7.3
KEV Urgent · 73 Public exploit Ransomware CWE-22 Mar 4, 2024
JetBrains TeamCity Relative Path Traversal Vulnerability
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
CVE-2023-42793
Critical · 9.8
KEV Urgent · 93 Public exploit Ransomware CWE-306 Sep 19, 2023
JetBrains TeamCity Authentication Bypass Vulnerability
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible