CVSS: 3.7EPSS: 0%CPEs: 1EXPL: 0CVE-2024-43808
https://notcve.org/view.php?id=CVE-2024-43808
In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0CVE-2024-43807
https://notcve.org/view.php?id=CVE-2024-43807
In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-43114
https://notcve.org/view.php?id=CVE-2024-43114
In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-276: Incorrect Default Permissions •
CVSS: 3.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-41829
https://notcve.org/view.php?id=CVE-2024-41829
In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection En JetBrains TeamCity antes de 2024.07, se podía robar un código OAuth para JetBrains Space a través de la conexión de Space Application. • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-303: Incorrect Implementation of Authentication Algorithm •
CVSS: 2.6EPSS: 0%CPEs: 1EXPL: 0CVE-2024-41828
https://notcve.org/view.php?id=CVE-2024-41828
In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time En JetBrains TeamCity antes de 2024.07, la comparación de tokens de autorización no llevaba un tiempo constante • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-208: Observable Timing Discrepancy •