Medium · 5.5 CVE-2024-35301 EUVD-2024-35272GHSA-75gf-xhhp-53rr

In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token

Published May 16, 2024 · Updated Aug 2, 2024 · Assigned by JetBrains

Vendor: JetBrains Product: TeamCity

Description

In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token

Affected products

Vendor	Product	Affected	Fixed
JetBrains	TeamCity	< 2024.03.1	2024.03.1

Advisories 2

WID-SEC-2024-1254 JetBrains TeamCity: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 30, 2024
WID-SEC-2024-1168 JetBrains TeamCity: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 15, 2024

References

https://www.jetbrains.com/privacy-security/issues-fixed/