CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-31135
https://notcve.org/view.php?id=CVE-2024-31135
28 Mar 2024 — In JetBrains TeamCity before 2024.03 open redirect was possible on the login page En JetBrains TeamCity antes de 2024.03, era posible abrir la redirección en la página de inicio de sesión • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-31134
https://notcve.org/view.php?id=CVE-2024-31134
28 Mar 2024 — In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registration was disabled En JetBrains TeamCity antes de 2024.03, los usuarios autenticados sin permisos administrativos podían registrar a otros usuarios cuando el registro automático estaba deshabilitado. • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-863: Incorrect Authorization •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-29880
https://notcve.org/view.php?id=CVE-2024-29880
21 Mar 2024 — In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running the agent process En JetBrains TeamCity antes de 2023.11, los usuarios con acceso a la máquina del agente podían obtener permisos del usuario que ejecuta el proceso del agente. • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-749: Exposed Dangerous Method or Function •
CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0CVE-2024-28174
https://notcve.org/view.php?id=CVE-2024-28174
06 Mar 2024 — In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized improperly En JetBrains TeamCity antes de 2023.11.4, las solicitudes de generación de URL prefirmadas en el complemento S3 Artifact Storage no se autorizaban correctamente • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-863: Incorrect Authorization •
CVSS: 7.3EPSS: 94%CPEs: 1EXPL: 1CVE-2024-27199
https://notcve.org/view.php?id=CVE-2024-27199
04 Mar 2024 — In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible En JetBrains TeamCity antes de 2023.11.4 era posible un path traversal permitiendo realizar acciones administrativas limitadas • https://github.com/W01fh4cker/CVE-2024-27198-RCE • CWE-23: Relative Path Traversal •
CVSS: 10.0EPSS: 94%CPEs: 1EXPL: 17CVE-2024-27198 – JetBrains TeamCity Authentication Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2024-27198
04 Mar 2024 — In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible En JetBrains TeamCity antes de 2023.11.4 era posible omitir la autenticación permitiendo realizar acciones administrativas JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions. • https://packetstorm.news/files/id/177445 • CWE-288: Authentication Bypass Using an Alternate Path or Channel •
CVSS: 10.0EPSS: 94%CPEs: 1EXPL: 0CVE-2024-23917
https://notcve.org/view.php?id=CVE-2024-23917
06 Feb 2024 — In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible En JetBrains TeamCity antes de 2023.11.3 era posible omitir la autenticación que conducía a RCE • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-288: Authentication Bypass Using an Alternate Path or Channel CWE-306: Missing Authentication for Critical Function •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-24942
https://notcve.org/view.php?id=CVE-2024-24942
06 Feb 2024 — In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives En JetBrains TeamCity antes de 2023.11.3, el path traversal permitía leer datos dentro de archivos JAR • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-23: Relative Path Traversal •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-24938
https://notcve.org/view.php?id=CVE-2024-24938
06 Feb 2024 — In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation En JetBrains TeamCity antes de 2023.11.2, era posible un directory traversal limitado en la documentación de Kotlin DSL • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-23: Relative Path Traversal •
CVSS: 5.5EPSS: 16%CPEs: 1EXPL: 0CVE-2024-24937
https://notcve.org/view.php?id=CVE-2024-24937
06 Feb 2024 — In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible En JetBrains TeamCity antes de 2023.11.2 era posible un XSS almacenado, a través de la distribución de agentes • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •