CVE-2024-27199 | BDVDB-2026-226512 Detail
JetBrainsTeamCity
Description#
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: network.
Weaknesses#
References#
- https://www.jetbrains.com/privacy-security/issues-fixed/
- https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive
- https://github.com/Stuub/RCity-CVE-2024-27198/blob/main/RCity.py
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27199
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.