JetBrains TeamCity vulnerabilities

In JetBrains TeamCity versions before 2023.05, an open redirect vulnerability during oAuth configuration was present.

In JetBrains TeamCity before version 2023.05, 'password' type parameters from build dependencies could be logged in some cases.

In JetBrains TeamCity before version 2023.05, an XSS vulnerability was possible in the Plugin Vendor URL.

In JetBrains TeamCity versions before 2023.05, a stored XSS vulnerability existed on the 'Show Connection' page.

In JetBrains TeamCity versions before 2023.05, improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API.