CVE-2024-36364

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 improper access control in Pull Requests and Commit status publisher build features was possible

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
May 29, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-363658.1In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agentCVE-2024-363666.1In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering oCVE-2024-363676.1In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via third-party reports was possibleCVE-2024-363685.4In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 reflected XSS via OAuth provider configuration was possibleCVE-2024-363695.4In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via issue tracker integration was possibleCVE-2024-36376.1The Responsive Contact Form Builder & Lead Generation Plugin WordPress plugin through 1.8.9 does not sanitise and escape some of its settingCVE-2024-363705.4In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 stored XSS via OAuth connection settings was possibleCVE-2024-363715.4In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possibleCVE-2024-363726.1In JetBrains TeamCity before 2023.05.6 reflected XSS on the subscriptions page was possibleCVE-2024-363735.4In JetBrains TeamCity before 2024.03.2 several stored XSS in untrusted builds settings were possibleCVE-2024-363745.4In JetBrains TeamCity before 2024.03.2 stored XSS via build step settings was possibleCVE-2024-363755.3In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed
CVE-2024-36364: Medium severity, CVSS 6.5 | Vulnix