CVSS: 7.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-41827
https://notcve.org/view.php?id=CVE-2024-41827
In JetBrains TeamCity before 2024.07 access tokens could continue working after deletion or expiration En JetBrains TeamCity antes de 2024.07, los tokens de acceso podían seguir funcionando después de su eliminación o vencimiento • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-613: Insufficient Session Expiration •
CVSS: 3.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-41826
https://notcve.org/view.php?id=CVE-2024-41826
In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page En JetBrains TeamCity antes de 2024.07, era posible el XSS almacenado en la página Show Connection • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0CVE-2024-41825
https://notcve.org/view.php?id=CVE-2024-41825
In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab En JetBrains TeamCity antes de 2024.07, era posible el XSS almacenado en la pestaña Code Inspection • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-41824
https://notcve.org/view.php?id=CVE-2024-41824
In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific cases En JetBrains TeamCity antes de 2024.07, los parámetros del tipo "password" podían filtrarse en el registro de compilación en algunos casos específicos. • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-39879
https://notcve.org/view.php?id=CVE-2024-39879
In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settings En JetBrains TeamCity antes de 2024.03.3, el token de aplicación podía exponerse en la configuración del perfil de nube EC2 • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-522: Insufficiently Protected Credentials •