Jetbrains Teamcity vulnerabilities, page 3
284 vulnerabilities
Known vulnerabilities in Jetbrains Teamcity, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2015-1313jetbrainsteamcity
EPSS score0.61%
JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML and JavaScript files that are returned to the web browser after an initial unauthenticated request.CVE-2025-54530jetbrainsteamcityEPSS score0.19%
In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissionsCVE-2025-54536jetbrainsteamcityEPSS score0.17%
In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpointCVE-2025-54535jetbrainsteamcityEPSS score0.19%
In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithmsCVE-2025-54534jetbrainsteamcityEPSS score0.86%
In JetBrains TeamCity before 2025.07 reflected XSS was possible on the agentpushPreset pageCVE-2025-54532jetbrainsteamcityEPSS score0.24%
In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependenciesCVE-2025-54538jetbrainsteamcityEPSS score0.27%
In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" commandCVE-2025-54528jetbrainsteamcityEPSS score0.17%
In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flowCVE-2025-54533jetbrainsteamcityEPSS score0.24%
In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configurationCVE-2025-54531jetbrainsteamcityEPSS score0.31%
In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on WindowsCVE-2025-54537jetbrainsteamcityEPSS score0.27%
In JetBrains TeamCity before 2025.07 user credentials were stored in plain text in memory snapshotsCVE-2025-54529jetbrainsteamcityEPSS score0.14%
In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integrationCVE-2025-52878jetbrainsteamcityEPSS score0.36%
In JetBrains TeamCity before 2025.03.3 usernames were exposed to the users without proper permissionsCVE-2025-52876jetbrainsteamcityEPSS score37.85%
In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possibleCVE-2025-52877jetbrainsteamcityEPSS score36.97%
In JetBrains TeamCity before 2025.03.3 reflected XSS on diskUsageBuildsStats page was possibleCVE-2025-52879jetbrainsteamcityEPSS score1.19%
In JetBrains TeamCity before 2025.03.3 reflected XSS in the NPM Registry integration was possibleCVE-2025-52875jetbrainsteamcityEPSS score0.98%
In JetBrains TeamCity before 2025.03.3 a DOM-based XSS at the Performance Monitor page was possibleCVE-2025-59456jetbrainsteamcityEPSS score13.57%
In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive uploadCVE-2025-59457jetbrainsteamcityEPSS score0.83%
In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on WindowsCVE-2025-59455jetbrainsteamcityEPSS score0.42%
In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition