Lucene search
K

Exploit for Cross-Site Request Forgery (CSRF) in Jetbrains Teamcity

🗓️ 02 Jul 2022 22:04:29Reported by yuriisaninType 
githubexploit
 githubexploit
🔗 github.com👁 719 Views

Exploit for Cross-Site Request Forgery in Jetbrains TeamCity, account takeover via CSRF in GitHub authentication (PoC), CVE-2022-24342. Allows attacker to redirect user to arbitrary GitHub OAuth2 application, intercept valid state parameter, and connect arbitrary GitHub account to victim's TeamCity account

Related
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for Server-Side Request Forgery in Jetbrains Hub
1 Sep 202221:08
githubexploit
ATTACKERKB
CVE-2022-24342
25 Feb 202215:15
attackerkb
Circl
CVE-2022-24342
25 Feb 202218:21
circl
CNNVD
JetBrains TeamCity 跨站请求伪造漏洞
25 Feb 202200:00
cnnvd
CNVD
JetBrains TeamCity Cross-Site Request Forgery Vulnerability
1 Mar 202200:00
cnvd
CVE
CVE-2022-24342
25 Feb 202214:35
cve
Cvelist
CVE-2022-24342
25 Feb 202214:35
cvelist
EUVD
EUVD-2022-29239
3 Oct 202520:07
euvd
Jetbrains
JetBrains Security Bulletin Q4 2021
8 Feb 202200:00
jetbrains
NVD
CVE-2022-24342
25 Feb 202215:15
nvd
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation