CVE-2024-27199
HIGH
7,3
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: low
Description
AI Translation Available
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,8247
Percentile
1,0th
Updated
EPSS Score Trend (Last 75 Days)
22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
StableCommon Consequences
Security Scopes Affected:
Integrity
Confidentiality
Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Modify Files Or Directories
Read Files Or Directories
Dos: Crash, Exit, Or Restart
Applicable Platforms
Technologies:
AI/ML
23
Relative Path Traversal
DraftCommon Consequences
Security Scopes Affected:
Integrity
Confidentiality
Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Modify Files Or Directories
Read Files Or Directories
Dos: Crash, Exit, Or Restart
Applicable Platforms
Technologies:
AI/ML, Not Technology-Specific, Web Based
Application
Teamcity by Jetbrains
Version Range Affected
To
2023.11.4
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://github.com/Stuub/RCity-CVE-2024-27198/blob/main/RCity.py
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024…
https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-…
https://www.jetbrains.com/privacy-security/issues-fixed/
https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-…
https://www.jetbrains.com/privacy-security/issues-fixed/