CVE-2022-24342

In JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible...

Exploit for Cross-Site Request Forgery (CSRF) in Jetbrains Teamcity

CVE-2022-24342 JetBrains TeamCity - account takeover via CSRF...

CVE-2022-24342

creationtimestamp| type| source ---|---|--- 2022-02-25 18:21:20+00:00| seen| https://t.me/cibsecurity/38108 2022-07-02 22:47:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2627 2022-07-03 06:33:56+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/2198 2022-07-04...

CVE-2022-24342

CVE-2022-24342 affects JetBrains TeamCity prior to 2021.2.1, where URL injection could lead to CSRF. Public sources (NVD/NVD-derived entries and Red Hat advisories) confirm the same issue and identify TeamCity as the affected product. The JetBrains Security Bulletin Q4 2021 lists “URL injection l...