CVE-2024-27199

🗓️ 04 Mar 2024 17:21:40Reported by JetBrainsType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 334 Views🌐 WEB

JetBrains TeamCity before 2023.11.4 path traversal issu

Reporter	Title	Published	Views	Family All 58
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	8 Mar 202412:40	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	9 Mar 202404:04	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	18 Oct 202516:45	–	githubexploit
GithubExploit	CVE-CICD-Security	13 Aug 202611:38	–	githubexploit
GithubExploit	Exploit for CVE-2024-30851	4 Apr 202422:59	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	6 Mar 202403:15	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	5 Mar 202405:43	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	7 Mar 202415:12	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	22 Apr 202422:14	–	githubexploit
GithubExploit	Exploit for Path Traversal in Jetbrains Teamcity	22 Apr 202422:14	–	githubexploit

NVD

Vulners

Node

jetbrains teamcityRange<2023.11.4

[
  {
    "vendor": "JetBrains",
    "product": "TeamCity",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "2023.11.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
darkreading	www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive
jetbrains	www.jetbrains.com/privacy-security/issues-fixed/
github	www.github.com/Stuub/RCity-CVE-2024-27198/blob/main/RCity.py
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
tokenName	path	/app/rest/users/id:1/tokens/{tokenName}	Create a new authentication token for admin access.	CWE-22, CWE-23
TEAMCITY_ADMIN_ID	path	/app/rest/users/id:1/tokens/{tokenName}	Create a new authentication token for admin access.	CWE-22, CWE-23
username	request body	/app/rest/users	Create a new administrator user via REST to obtain credentials.	CWE-22, CWE-23
password	request body	/app/rest/users	Create a new administrator user via REST to obtain credentials.	CWE-22, CWE-23
roles	request body	/app/rest/users	Create a new administrator user via REST to obtain credentials.	CWE-22, CWE-23
fileName	request body	/admin/pluginUpload.html	Upload a malicious plugin ZIP to the TeamCity server.	CWE-22, CWE-23
file:fileToUpload	request body	/admin/pluginUpload.html	Upload a malicious plugin ZIP to the TeamCity server.	CWE-22, CWE-23
action	request body	/admin/plugins.html	Enable the uploaded plugin by sending loadAll action.	CWE-22, CWE-23
plugins	request body	/admin/plugins.html	Enable the uploaded plugin by sending loadAll action.	CWE-22, CWE-23
plugin_name	path	/plugins/{plugin_name}/{plugin_name}.jsp	Trigger payload execution by requesting the injected JSP.	CWE-22, CWE-23

17 Jun 2026 07:19Current

8High risk

Vulners AI Score8

CVSS 3.17.3

EPSS0.99991

SSVC

cve-2024-27199 jetbrains teamcity path traversal admin actions nvd