Lucene search

[email protected]CVE-2024-24938

HistoryFeb 06, 2024 - 10:15 a.m.

CVE-2024-24938

2024-02-0610:15:10

CWE-22

CWE-23

[email protected]

web.nvd.nist.gov

cve-2024-24938

jetbrains

teamcity

kotlin

dsl

directory traversal

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

17.2%

JSON

In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation

CPENameOperatorVersion
jetbrains:teamcityjetbrains teamcitylt2023.11.2
jetbrains:teamcityjetbrains teamcityeq2022.10.3
jetbrains:teamcityjetbrains teamcityeq2018.2.1
jetbrains:teamcityjetbrains teamcityeq2020.1.5
jetbrains:teamcityjetbrains teamcityeq9.1.7
jetbrains:teamcityjetbrains teamcityeq9.0.2
jetbrains:teamcityjetbrains teamcityeq2017.2.2
jetbrains:teamcityjetbrains teamcityeq9.1.3
jetbrains:teamcityjetbrains teamcityeq5.1
jetbrains:teamcityjetbrains teamcityeq5.0

CPE	Name	Operator	Version
jetbrains:teamcity	jetbrains teamcity	lt	2023.11.2
jetbrains:teamcity	jetbrains teamcity	eq	2022.10.3
jetbrains:teamcity	jetbrains teamcity	eq	2018.2.1
jetbrains:teamcity	jetbrains teamcity	eq	2020.1.5
jetbrains:teamcity	jetbrains teamcity	eq	9.1.7
jetbrains:teamcity	jetbrains teamcity	eq	9.0.2
jetbrains:teamcity	jetbrains teamcity	eq	2017.2.2
jetbrains:teamcity	jetbrains teamcity	eq	9.1.3
jetbrains:teamcity	jetbrains teamcity	eq	5.1
jetbrains:teamcity	jetbrains teamcity	eq	5.0

Rows per page:

1-10 of 1091

References

www.jetbrains.com/privacy-security/issues-fixed/

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

17.2%

JSON

Related for CVE-2024-24938

cvelist1 prion1 nessus1