Vulnerabilidades do Jetbrains Teamcity

CVE-2026-49371 Alta · 8.2 CWE-79 29/05/2026

Cross-site Scripting (XSS) em Jetbrains Teamcity

In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible

CVE-2026-44413 Alta · 7.5 CWE-306 11/05/2026

Missing Authentication for Critical Function em Jetbrains Teamcity

In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised access

CVE-2026-28196 Baixa · 2.3 CWE-459 25/02/2026

In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials…

In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk

CVE-2026-28195 Média · 4.3 CWE-862 25/02/2026

Missing Authorization em Jetbrains Teamcity

In JetBrains TeamCity before 2025.11.3 missing authorization allowed project developers to add parameters to build configurations

CVE-2026-28194 Média · 6.1 CWE-601 25/02/2026

Open Redirect em Jetbrains Teamcity

In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow

CVE-2025-68268 Média · 6.1 CWE-79 16/12/2025

Cross-site Scripting (XSS) em Jetbrains Teamcity

In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings page

CVE-2025-68267 Média · 6.5 CWE-272 16/12/2025

In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing…

In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation token

CVE-2025-68166 Média · 6.1 CWE-79 16/12/2025

Cross-site Scripting (XSS) em Jetbrains Teamcity

In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tab

CVE-2025-68165 Média · 6.1 CWE-79 16/12/2025

Cross-site Scripting (XSS) em Jetbrains Teamcity

In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup

CVE-2025-68164 Baixa · 2.7 CWE-203 16/12/2025

Observable Discrepancy em Jetbrains Teamcity

In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test

CVE-2025-68163 Média · 4.8 CWE-79 16/12/2025

Cross-site Scripting (XSS) em Jetbrains Teamcity

In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page

CVE-2025-68162 Baixa · 2.7 CWE-829 16/12/2025

In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via…

In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration

CVE-2025-67742 Alta · 7.5 CWE-22 11/12/2025

Path Traversal em Jetbrains Teamcity

In JetBrains TeamCity before 2025.11 path traversal was possible via file upload

CVE-2025-67741 Média · 5.4 CWE-79 11/12/2025

Cross-site Scripting (XSS) em Jetbrains Teamcity

In JetBrains TeamCity before 2025.11 stored XSS was possible via session attribute

CVE-2025-67740 Média · 5.3 CWE-863 11/12/2025

Incorrect Authorization em Jetbrains Teamcity

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata

CVE-2025-67739 Baixa · 3.1 CWE-939 11/12/2025

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to…

In JetBrains TeamCity before 2025.11.2 improper repository URL validation could lead to local paths disclosure

CVE-2024-27198 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-288 04/03/2024

JetBrains TeamCity Authentication Bypass Vulnerability

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

CVE-2024-27199 Alta · 7.3 KEV Urgente · 73 Exploit público Ransomware CWE-22 04/03/2024

JetBrains TeamCity Relative Path Traversal Vulnerability

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

CVE-2023-42793 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-306 19/09/2023

JetBrains TeamCity Authentication Bypass Vulnerability

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible