CVE-2022-24342

HIGH

JetBrains TeamCity <2021.2.1 - CSRF

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-24342. PoCs published by yuriisanin.

AI-analyzed exploit summary This PoC exploits a CSRF vulnerability in JetBrains TeamCity's GitHub OAuth2 authentication flow, allowing an attacker to takeover a victim's account by intercepting the OAuth2 state parameter and injecting arbitrary GitHub accounts.

Description

In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.

Exploits (1)

nomisec WORKING POC 36 stars
by yuriisanin · poc
https://github.com/yuriisanin/CVE-2022-24342

This PoC exploits a CSRF vulnerability in JetBrains TeamCity's GitHub OAuth2 authentication flow, allowing an attacker to takeover a victim's account by intercepting the OAuth2 state parameter and injecting arbitrary GitHub accounts.

Classification
Working Poc 100%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: JetBrains TeamCity <2021.2.1
No auth needed
Prerequisites: GitHub authentication enabled on TeamCity · Attacker's GitHub session cookie · GitHub OAuth2 application configured with attacker-controlled callback URL
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Vendor Advisory x_refsource_misc
https://blog.jetbrains.com

Scores

CVSS v3 8.8
EPSS 0.0320
EPSS Percentile 86.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-352
Status published
Products (1)
jetbrains/teamcity < 2021.2.1
Published Feb 25, 2022
Tracked Since Feb 18, 2026