First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2021-37542

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

In JetBrains TeamCity before 2020.2.3, XSS was possible.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Aug 6, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-375438.8In JetBrains RubyMine before 2021.1.1, code execution without user confirmation was possible for untrusted projects.CVE-2021-375449.8In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization.CVE-2021-375457.5In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made.CVE-2021-375465.3In JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted properties was used.CVE-2021-375475.3In JetBrains TeamCity before 2020.2.4, insufficient checks during file uploading were made.CVE-2021-375487.5In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS.CVE-2021-375499.1In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient.CVE-2021-375507.5In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.CVE-2021-375515.3In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.CVE-2021-375525.4In JetBrains YouTrack before 2021.2.17925, stored XSS was possible.CVE-2021-375537.5In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.CVE-2021-375544.3In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions.

CVE-2021-37542: Medium severity, CVSS 6.1 | Vulnix