Medium · 5.9 CVE-2024-31139 EUVD-2024-29050GHSA-p65p-h8xw-f45x

In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector

Published Mar 28, 2024 · Updated Aug 2, 2024 · Assigned by JetBrains

Vendor: JetBrains Product: TeamCity

Description

In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector

Affected products

Vendor	Product	Affected	Fixed
JetBrains	TeamCity	< 2024.03	2024.03

Advisories 2

WID-SEC-2024-0756 JetBrains TeamCity: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 27, 2024
WID-SEC-2024-1254 JetBrains TeamCity: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 30, 2024

References

https://www.jetbrains.com/privacy-security/issues-fixed/