ID de Prueba:	1.3.6.1.4.1.25623.1.0.805444
Categoría:	Web application abuses
Título:	JetBrains TeamCity < 8.1 Multiple Vulnerabilities
Resumen:	JetBrains Teamcity is prone to multiple vulnerabilities.
Descripción:	Summary: JetBrains Teamcity is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - The feed/generateFeedUrl.html script does not validate input to the 'cameFromUrl' parameter before returning it to users. - An unspecified error. Vulnerability Impact: Successful exploitation will allow remote attackers to create a specially crafted request that would execute arbitrary script code in a user's browser session and gain access to potentially sensitive information. Affected Software/OS: JetBrains TeamCity version before 8.1 Solution: Upgrade to JetBrains TeamCity 8.1 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2014-10036 https://www.netsparker.com/critical-xss-vulnerabilities-in-teamcity/ http://secunia.com/advisories/57221 XForce ISS Database: teamcity-camefromurl-xss(91768) https://exchange.xforce.ibmcloud.com/vulnerabilities/91768 Common Vulnerability Exposure (CVE) ID: CVE-2014-10002
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.