Описание
JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML and JavaScript files that are returned to the web browser after an initial unauthenticated request.
Ссылки
- ExploitThird Party Advisory
- Product
- ExploitThird Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1Версия от 8.0 (включая) до 9.0.2 (исключая)
cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*
EPSS
Процентиль: 0%
0.00002
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-425
Связанные уязвимости
CVSS3: 6.5
github
больше 2 лет назад
JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML and JavaScript files that are returned to the web browser after an initial unauthenticated request.
EPSS
Процентиль: 0%
0.00002
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-425