CVE-2023-34219

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-285CWE-863

Affected software

No affected versions have been published.

Timeline

Published
May 31, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-34228.8Use after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who convinced a user to install a malicious extensCVE-2023-342205.4In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possibleCVE-2023-342215.4In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possibleCVE-2023-342226.1In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possibleCVE-2023-342235.3In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some casesCVE-2023-342244.8In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possibleCVE-2023-342255.4In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possibleCVE-2023-342266.1In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possibleCVE-2023-342277.5In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacksCVE-2023-342286.5In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actionsCVE-2023-342295.4In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possibleCVE-2023-34238.8Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1.2.0.
CVE-2023-34219: Medium severity, CVSS 4.3 | Vulnix