CVE-2015-1313

2023-06-2914:07:44

mitre

www.cve.org

jetbrains

teamcity

account creation

bypass

vulnerability

html

javascript

crafted request

0.001 Low

EPSS

Percentile

24.0%

JSON

JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML and JavaScript files that are returned to the web browser after an initial unauthenticated request.

CNA Affected

[
  {
    "vendor": "JetBrains",
    "product": "TeamCity",
    "versions": [
      {
        "version": "8.0.1",
        "status": "affected",
        "lessThan": "9.0.2",
        "versionType": "semver"
      }
    ]
  }
]

References

beyondbinary.io/articles/teamcity-account-creation/

www.jetbrains.com/teamcity/download/

0.001 Low

EPSS

Percentile

24.0%

JSON

Related for CVELIST:CVE-2015-1313