CVSS: 9.8EPSS: 14%CPEs: 1EXPL: 0CVE-2024-23917
https://notcve.org/view.php?id=CVE-2024-23917
In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible En JetBrains TeamCity antes de 2023.11.3 era posible omitir la autenticación que conducía a RCE • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-288: Authentication Bypass Using an Alternate Path or Channel CWE-306: Missing Authentication for Critical Function •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-24942
https://notcve.org/view.php?id=CVE-2024-24942
In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives En JetBrains TeamCity antes de 2023.11.3, el path traversal permitía leer datos dentro de archivos JAR • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-23: Relative Path Traversal •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-24938
https://notcve.org/view.php?id=CVE-2024-24938
In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation En JetBrains TeamCity antes de 2023.11.2, era posible un directory traversal limitado en la documentación de Kotlin DSL • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-23: Relative Path Traversal •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-24937
https://notcve.org/view.php?id=CVE-2024-24937
In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible En JetBrains TeamCity antes de 2023.11.2 era posible un XSS almacenado, a través de la distribución de agentes • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-24936
https://notcve.org/view.php?id=CVE-2024-24936
In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed En JetBrains TeamCity antes de 2023.11.2, se omitía el control de acceso en el endpoint del complemento S3 Artifact Storage • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-285: Improper Authorization •