Jetbrains Teamcity vulnerabilities

CVE-2023-34227 [HIGH] CWE-749 CVE-2023-34227: In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks

CVE-2024-41829 [HIGH] CWE-303 CVE-2024-41829: In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space App In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection

CVE-2015-1313 [MEDIUM] CWE-425 CVE-2015-1313: JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML and JavaScript files that are returned to the web browser after an initial unauthenticated request.

CVE-2020-7909 [HIGH] CWE-522 CVE-2020-7909: In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI. In JetBrains TeamCity before 2019.1.5, some server-stored passwords could be shown via the web UI.

CVE-2022-25264 [HIGH] CWE-922 CVE-2022-25264: In JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be logged In JetBrains TeamCity before 2021.2.3, environment variables of the "password" type could be logged in some cases.

CVE-2021-37548 [HIGH] CWE-312 CVE-2021-37548: In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS. In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS.

CVE-2022-44623 [HIGH] CWE-538 CVE-2022-44623: In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in th In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner settings

CVE-2024-36378 [HIGH] CWE-770 CVE-2024-36378: In JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tok In JetBrains TeamCity before 2024.03.2 server was susceptible to DoS attacks with incorrect auth tokens

CVE-2025-31141 [HIGH] CWE-209 CVE-2025-31141: In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles pa In JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles page

CVE-2025-57734 [MEDIUM] CWE-538 CVE-2025-57734: In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files In JetBrains TeamCity before 2025.07.1 aWS credentials were exposed in Docker script files

CVE-2024-36362 [MEDIUM] CWE-23 CVE-2024-36362: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal al In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible

CVE-2023-34228 [MEDIUM] CWE-308 CVE-2023-34228: In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for so In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actions

CVE-2026-49379 [MEDIUM] CWE-522 CVE-2026-49379: In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names In JetBrains TeamCity before 2026.1 credentials could be exposed in thread names

CVE-2021-26310 [HIGH] CVE-2021-26310: In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible. In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible.

CVE-2021-31910 [HIGH] CWE-918 CVE-2021-31910: In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible. In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible.

CVE-2019-15038 [HIGH] CVE-2019-15038: An issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some secur An issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some security-related HTTP headers. The issue was fixed in TeamCity 2019.1.

CVE-2020-11687 [HIGH] CWE-200 CVE-2020-11687: In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several p In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages.

CVE-2021-25776 [HIGH] CWE-922 CVE-2021-25776: In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters. In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters.

CVE-2021-43196 [HIGH] CVE-2021-43196: In JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection dialo In JetBrains TeamCity before 2021.1, information disclosure via the Docker Registry connection dialog is possible.

CVE-2021-31913 [HIGH] CWE-354 CVE-2021-31913: In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitH In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange.