Jetbrains Teamcity vulnerabilities

CVE-2020-15825 [HIGH] CVE-2020-15825: In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges.

CVE-2024-47948 [HIGH] CWE-23 CVE-2024-47948: In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups

CVE-2024-31136 [HIGH] CWE-1288 CVE-2024-31136: In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter

CVE-2025-52876 [MEDIUM] CWE-79 CVE-2025-52876: In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible In JetBrains TeamCity before 2025.03.3 reflected XSS on the favoriteIcon page was possible

CVE-2025-59456 [MEDIUM] CWE-23 CVE-2025-59456: In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload

CVE-2024-31139 [HIGH] CWE-611 CVE-2024-31139: In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector

CVE-2024-36376 [HIGH] CWE-863 CVE-2024-36376: In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to t In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their permissions

CVE-2025-54536 [HIGH] CWE-352 CVE-2025-54536: In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint

CVE-2020-35667 [HIGH] CWE-918 CVE-2020-35667: JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials.

CVE-2019-15036 [HIGH] CWE-78 CVE-2019-15036: An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could execu An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could execute any command on the server machine. The issue was fixed in TeamCity 2018.2.5 and 2019.1.

CVE-2022-24341 [HIGH] CWE-613 CVE-2022-24341: In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminat In JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't terminate sessions of the edited user.

CVE-2025-54535 [HIGH] CWE-328 CVE-2025-54535: In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak ha In JetBrains TeamCity before 2025.07 password reset and email verification tokens were using weak hashing algorithms

CVE-2025-54528 [HIGH] CWE-352 CVE-2025-54528: In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flow In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flow

CVE-2022-24335 [HIGH] CWE-367 CVE-2022-24335: JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race-conditi JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race-condition attack in agent registration via XML-RPC.

CVE-2024-29880 [HIGH] CWE-749 CVE-2024-29880: In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running the agent process

CVE-2024-43114 [HIGH] CWE-276 CVE-2024-43114: In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory perm In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions

CVE-2023-50870 [HIGH] CWE-352 CVE-2023-50870: In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible

CVE-2026-49371 [HIGH] CWE-79 CVE-2026-49371: In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible In JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible

CVE-2023-39174 [HIGH] CWE-1333 CVE-2023-39174: In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue tracke In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers

CVE-2022-44624 [HIGH] CWE-532 CVE-2022-44624: In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters