CVSS: 7.3EPSS: 1%CPEs: 1EXPL: 1CVE-2024-27199
https://notcve.org/view.php?id=CVE-2024-27199
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible En JetBrains TeamCity antes de 2023.11.4 era posible un path traversal permitiendo realizar acciones administrativas limitadas • https://github.com/W01fh4cker/CVE-2024-27198-RCE https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive https://www.jetbrains.com/privacy-security/issues-fixed • CWE-23: Relative Path Traversal •
CVSS: 9.8EPSS: 97%CPEs: 1EXPL: 12CVE-2024-27198 – JetBrains TeamCity Authentication Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2024-27198
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible En JetBrains TeamCity antes de 2023.11.4 era posible omitir la autenticación permitiendo realizar acciones administrativas JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions. • https://github.com/W01fh4cker/CVE-2024-27198-RCE https://github.com/yoryio/CVE-2024-27198 https://github.com/K3ysTr0K3R/CVE-2024-27198-EXPLOIT https://github.com/Chocapikk/CVE-2024-27198 https://github.com/Stuub/RCity-CVE-2024-27198 https://github.com/jrbH4CK/CVE-2024-27198 https://github.com/rampantspark/CVE-2024-27198 https://github.com/HPT-Intern-Task-Submission/CVE-2024-27198 https://github.com/CharonDefalt/CVE-2024-27198-RCE https://github.com/passwa11/CVE-2024-27198 • CWE-288: Authentication Bypass Using an Alternate Path or Channel •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-24943
https://notcve.org/view.php?id=CVE-2024-24943
In JetBrains Toolbox App before 2.2 a DoS attack was possible via a malicious SVG image En la aplicación JetBrains Toolbox anterior a 2.2, era posible un ataque DoS a través de una imagen SVG maliciosa • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-400: Uncontrolled Resource Consumption •
CVSS: 9.8EPSS: 14%CPEs: 1EXPL: 0CVE-2024-23917
https://notcve.org/view.php?id=CVE-2024-23917
In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible En JetBrains TeamCity antes de 2023.11.3 era posible omitir la autenticación que conducía a RCE • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-288: Authentication Bypass Using an Alternate Path or Channel CWE-306: Missing Authentication for Critical Function •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-24942
https://notcve.org/view.php?id=CVE-2024-24942
In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives En JetBrains TeamCity antes de 2023.11.3, el path traversal permitía leer datos dentro de archivos JAR • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CWE-23: Relative Path Traversal •