CVE-2024-36362

MEDIUM

JetBrains TeamCity <2022.04.7-2024.03.2 - Path Traversal

Title source: llm

Description

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible

References (1)

Scores

CVSS v3 6.5
EPSS 0.0001
EPSS Percentile 0.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-22 CWE-23
Status published

Affected Products (1)

jetbrains/teamcity < 2022.04.7

Timeline

Published May 29, 2024
Tracked Since Feb 18, 2026