CVE-2024-36362

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36362
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.jetbrains.com/privacy-security/issues-fixed/
Configurations

No configuration.

History

31 May 2024, 14:15

Type Values Removed Values Added
Summary
  • (es) En JetBrains TeamCity antes de 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5, 2024.03.2 era posible path traversal permitiendo leer archivos del servidor
Summary (en) In JetBrains TeamCity before 2022.04.6, 2022.10.5, 2023.05.5, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible (en) In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible

29 May 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-29 14:15

Updated : 2024-05-31 14:15

NVD link : CVE-2024-36362

Mitre link : CVE-2024-36362

CVE.ORG link : CVE-2024-36362

JSON object : View

Products Affected

No product.

CWE
CWE-23

Relative Path Traversal