CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| MEDIO4.8 |
In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible |
| 31/05/2023 |
| CVE-2023-34223 | MEDIO5.3 | In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases | 31/05/2023 |
| CVE-2023-34222 | MEDIO6.1 | In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible | 31/05/2023 |
| CVE-2023-34221 | MEDIO5.4 | In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible | 31/05/2023 |
| CVE-2023-34220 | MEDIO5.4 | In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible | 31/05/2023 |
| CVE-2023-34219 | MEDIO4.3 | In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API | 31/05/2023 |
| CVE-2023-34218 | CRITICO9.8 | In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible | 31/05/2023 |
| CVE-2022-48428 | MEDIO5.4 | In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible | 27/03/2023 |
| CVE-2022-48427 | MEDIO5.4 | In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible | 27/03/2023 |
| CVE-2022-48426 | MEDIO5.4 | In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible | 27/03/2023 |
| CVE-2022-48344 | MEDIO6.1 | In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process. | 23/02/2023 |
| CVE-2022-48343 | MEDIO6.1 | In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process. | 23/02/2023 |
| CVE-2022-48342 | CRITICO9.8 | In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents. | 23/02/2023 |
| CVE-2022-46831 | MEDIO4.9 | In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators. | 08/12/2022 |
| CVE-2022-46830 | MEDIO5.3 | In JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning. | 08/12/2022 |
| CVE-2022-44646 | MEDIO5.3 | In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settings | 03/11/2022 |