Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Teamcity
(Jetbrains)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 197 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2021-02-03 | CVE-2021-25777 | In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly. | Teamcity | 5.3 | ||
2021-02-03 | CVE-2021-25778 | In JetBrains TeamCity before 2020.2.1, permissions during user deletion were checked improperly. | Teamcity | 5.3 | ||
2021-05-11 | CVE-2021-26309 | Information disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible because a local temporary file had Insecure Permissions. | Teamcity | 3.3 | ||
2021-05-11 | CVE-2021-26310 | In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible. | Teamcity | 7.5 | ||
2021-05-11 | CVE-2021-31904 | In JetBrains TeamCity before 2020.2.2, XSS was potentially possible on the test history page. | Teamcity | 6.1 | ||
2021-05-11 | CVE-2021-31906 | In JetBrains TeamCity before 2020.2.2, audit logs were not sufficient when an administrator uploaded a file. | Teamcity | 2.7 | ||
2021-05-11 | CVE-2021-31907 | In JetBrains TeamCity before 2020.2.2, permission checks for changing TeamCity plugins were implemented improperly. | Teamcity | 5.3 | ||
2021-05-11 | CVE-2021-31908 | In JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages. | Teamcity | 5.4 | ||
2021-05-11 | CVE-2021-31909 | In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible. | Teamcity | 9.8 | ||
2021-05-11 | CVE-2021-3315 | In JetBrains TeamCity before 2020.2.2, stored XSS on a tests page was possible. | Teamcity | 5.4 |