The version of JetBrains TeamCity installed on the remote host is prior to 2022.04.7, 2022.10.6, 2023.05.6, or 2023.11.5. It is, therefore, affected by multiple vulnerabilities as referenced in the CVE-2024-36363 advisory.

  - In JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 several Stored XSS in code     inspection reports were possible (CVE-2024-36363)

  - In JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 improper access control in Pull     Requests and Commit status publisher build features was possible (CVE-2024-36364)

  - In JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 an XSS could be executed via     certain report grouping and filtering operations (CVE-2024-36366)

  - In JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 stored XSS via third-party reports     was possible (CVE-2024-36367)

  - In JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 reflected XSS via OAuth provider     configuration was possible (CVE-2024-36368)

  - In JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 stored XSS via issue tracker     integration was possible (CVE-2024-36369)

  - In JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 stored XSS via OAuth connection     settings was possible (CVE-2024-36370)

  - In JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5 authentication bypass was possible     in specific edge cases (CVE-2024-36470)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

JetBrains TeamCity Multiple Vulnerabilities

high Nessus Plugin ID 198226

Version 1.2

Version 1.1

Version 1.2 Oct 25, 2024, 2:42 PM Plugin metadata (update enable_cgi_scanning attribute) Plugin Feed: 202410251442
Version 1.1 Jun 1, 2024, 5:45 AM New Plugin Feed: 202406010545