CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-24937
https://notcve.org/view.php?id=CVE-2024-24937
In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible En JetBrains TeamCity antes de 2023.11.2 era posible un XSS almacenado, a través de la distribución de agentes • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-24936
https://notcve.org/view.php?id=CVE-2024-24936
In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed En JetBrains TeamCity antes de 2023.11.2, se omitía el control de acceso en el endpoint del complemento S3 Artifact Storage • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-285: Improper Authorization •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-50870
https://notcve.org/view.php?id=CVE-2023-50870
In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible En JetBrains TeamCity antes de 2023.11.1 era posible un CSRF al iniciar sesión • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-352: Cross-Site Request Forgery (CSRF) •