Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
285 results · page 3 of 6
Jul 22, 2024In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection pageCVE-2024-41826 · Other software · JetBrains · reported by cve@jetbrains.comLow 3.5
In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 22, 2024In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tabCVE-2024-41825 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2024.07 stored XSS was possible on the Code Inspection tab
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 22, 2024In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific casesCVE-2024-41824 · Other software · JetBrains · reported by cve@jetbrains.comMedium 6.4
In JetBrains TeamCity before 2024.07 parameters of the "password" type could leak into the build log in some specific cases
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 1, 2024In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settingsCVE-2024-39879 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5
In JetBrains TeamCity before 2024.03.3 application token could be exposed in EC2 Cloud Profile settings
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 1, 2024In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App ConnectionCVE-2024-39878 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.1
In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge casesCVE-2024-36470 · Other software · JetBrains · reported by cve@jetbrains.comHigh 8.1
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tokensCVE-2024-36378 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.9
In JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tokens
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2024.03.2 certain TeamCity API endpoints did not check user permissionsCVE-2024-36377 · Other software · JetBrains · reported by cve@jetbrains.comMedium 6.5
In JetBrains TeamCity before 2024.03.2 certain TeamCity API endpoints did not check user permissions
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their permissionsCVE-2024-36376 · Other software · JetBrains · reported by cve@jetbrains.comMedium 6.5
In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their permissions
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposedCVE-2024-36375 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.3
In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possibleCVE-2024-36374 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possibleCVE-2024-36373 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possibleCVE-2024-36372 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possibleCVE-2024-36371 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possibleCVE-2024-36370 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via issue tracker integration was possibleCVE-2024-36369 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via issue tracker integration was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possibleCVE-2024-36368 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party reports was possibleCVE-2024-36367 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party reports was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering operationsCVE-2024-36366 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.4
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering operations
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agentCVE-2024-36365 · Other software · JetBrains · reported by cve@jetbrains.comMedium 6.8
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was CVE-2024-36364 · Other software · JetBrains · reported by cve@jetbrains.comMedium 6.5
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 several Stored XSS in code inspection reports were possibleCVE-2024-36363 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 several Stored XSS in code inspection reports were possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 29, 2024In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possibleCVE-2024-36362 · Other software · JetBrains · reported by cve@jetbrains.comMedium 6.5
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 16, 2024In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possibleCVE-2024-35302 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.4
In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 16, 2024In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App tokenCVE-2024-35301 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.5
In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
May 16, 2024In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possibleCVE-2024-35300 · Other software · JetBrains · reported by cve@jetbrains.comLow 3.5
In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 28, 2024In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing toolsCVE-2024-31140 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.1
In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing tools
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 28, 2024In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detectorCVE-2024-31139 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.9
In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 28, 2024In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settingsCVE-2024-31138 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 28, 2024In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configurationCVE-2024-31137 · Other software · JetBrains · reported by cve@jetbrains.comMedium 6.8
In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 28, 2024In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameterCVE-2024-31136 · Other software · JetBrains · reported by cve@jetbrains.comHigh 7.4
In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 28, 2024In JetBrains TeamCity before 2024.03 open redirect was possible on the login pageCVE-2024-31135 · Other software · JetBrains · reported by cve@jetbrains.comMedium 6.1
In JetBrains TeamCity before 2024.03 open redirect was possible on the login page
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 28, 2024In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registration was disabledCVE-2024-31134 · Other software · JetBrains · reported by cve@jetbrains.comMedium 6.5
In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registration was disabled
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 21, 2024In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running the agent processCVE-2024-29880 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.2
In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running the agent process
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 6, 2024In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized improperlyCVE-2024-28174 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.8
In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized improperly
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 6, 2024In JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password" type could be disclosedCVE-2024-28173 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.3
In JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password" type could be disclosed
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Mar 4, 2024JetBrains TeamCity Relative Path Traversal VulnerabilityCVE-2024-27199 · Other software · JetBrains · reported by cve@jetbrains.comExploitedRansomwareHigh 7.3
JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.
- Product
- TeamCity
- On CISA’s list since
- Apr 20, 2026 (federal fix deadline May 4, 2026)
- What to do
- Attackers are using this now. Install JetBrains’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogdarkreading.comjetbrains.com
Mar 4, 2024JetBrains TeamCity Authentication Bypass VulnerabilityCVE-2024-27198 · Other software · JetBrains · reported by cve@jetbrains.comExploitedRansomwareCritical 9.8
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
- Product
- TeamCity
- On CISA’s list since
- Mar 7, 2024 (federal fix deadline Mar 28, 2024)
- What to do
- Attackers are using this now. Install JetBrains’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogdarkreading.comjetbrains.com
Feb 6, 2024In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archivesCVE-2024-24942 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.3
In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Feb 6, 2024In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentationCVE-2024-24938 · Other software · JetBrains · reported by cve@jetbrains.comMedium 5.3
In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Feb 6, 2024In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possibleCVE-2024-24937 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Feb 6, 2024In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missedCVE-2024-24936 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.3
In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Feb 6, 2024In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possibleCVE-2024-23917 · Other software · JetBrains · reported by cve@jetbrains.comCritical 9.8
In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Dec 15, 2023In JetBrains TeamCity before 2023.11.1 a CSRF on login was possibleCVE-2023-50870 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.3
In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Sep 19, 2023In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configurationCVE-2023-43566 · Other software · JetBrains · reported by cve@jetbrains.comLow 3.5
In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Sep 19, 2023JetBrains TeamCity Authentication Bypass VulnerabilityCVE-2023-42793 · Other software · JetBrains · reported by cve@jetbrains.comExploitedRansomwareCritical 9.8
JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.
- Product
- TeamCity
- On CISA’s list since
- Oct 4, 2023 (federal fix deadline Oct 25, 2023)
- What to do
- Attackers are using this now. Install JetBrains’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogpacketstormsecurity.comattackerkb.com
Aug 25, 2023In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registrationCVE-2023-41250 · Other software · JetBrains · reported by cve@jetbrains.comLow 3.5
In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Aug 25, 2023In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build StepCVE-2023-41249 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Aug 25, 2023In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configurationCVE-2023-41248 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Jul 25, 2023In JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possibleCVE-2023-39175 · Other software · JetBrains · reported by cve@jetbrains.comMedium 4.6
In JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possible
- Product
- TeamCity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjetbrains.comjetbrains.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.