Description
In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | TeamCity | < 2023.05.2 | 2023.05.2 |
Medium · 5.4
CVE-2023-39173
EUVD-2023-42908GHSA-xc8r-3vq4-2wwp
In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access
Published Jul 25, 2023 · Updated Oct 15, 2024 · Assigned by JetBrains