Medium WID-SEC-2025-2079 3 CVEs

JetBrains TeamCity: Mehrere Schwachstellen

Published Sep 16, 2025 · Updated Sep 17, 2025 · Revision 2 · de-DE

Vendor: JetBrains Product: TeamCity Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in JetBrains TeamCity ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Dateien zu manipulieren und Informationen offenzulegen.

Product

TeamCity ist ein Continuous Integration und Deployment Tool für Entwickler und DevOps Ingenieure.

Vulnerabilities 3

High 7.7

CVE-2025-59457

In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows

JetBrains TeamCity

Sep 17, 2025
Medium 5.5

CVE-2025-59456 EPSS 15%

In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload

JetBrains TeamCity

Sep 17, 2025
Medium 4.2

CVE-2025-59455

In JetBrains TeamCity before 2025.07.2 project isolation bypass was possible due to race condition

JetBrains TeamCity

Sep 17, 2025

Revision history

2025-09-17 #2
Referenz(en) aufgenommen: EUVD-2025-29703, EUVD-2025-29704, EUVD-2025-29702
2025-09-16 #1
Initiale Fassung

References

JetBrains Fixed Issues vom 2025-09-16
https://www.jetbrains.com/privacy-security/issues-fixed/
NIST Vulnerability Database vom 2025-09-16
https://nvd.nist.gov/vuln/detail/CVE-2025-59455
NIST Vulnerability Database vom 2025-09-16
https://nvd.nist.gov/vuln/detail/CVE-2025-59456
NIST Vulnerability Database vom 2025-09-16
https://nvd.nist.gov/vuln/detail/CVE-2025-59457