Sploitus

8 exploited vulnerabilities in Teamcity

Vulnerabilities with publicly known exploits

Vendors
Jetbrains
With known exploits
8
Affected Jetbrains Teamcity versions
< 2023.11.4, 2023.05.4, 2018.2.4, 2021.2.1, 9.0.2, 2024.12, 8.0

Vulnerabilities with exploits

Highest CVSS first — 6 of these already have exploit code on Sploitus

CVE-2024-27198 24 exploits
CVSS 10.0 CRITICAL 2023-03-04FIX AVAILABLE
Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains TeamcityExploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity
CVE-2023-42793 16 exploits
CVSS 10.0 CRITICAL 2023-09-19FIX AVAILABLE
Exploit for Missing Authentication for Critical Function in Jetbrains TeamcityExploit for Missing Authentication for Critical Function in Jetbrains Teamcity
CVE-2019-15039 4 exploits
CVSS 9.8 CRITICAL 2019-09-26FIX AVAILABLE
JetBrains TeamCity 2018.2.4 - Remote Code Execution ExploitJetBrains TeamCity 2018.2.4 - Remote Code Execution
CVE-2022-24342 2 exploits
CVSS 8.8 HIGH 2022-02-08FIX AVAILABLE
Exploit for Server-Side Request Forgery in Jetbrains HubExploit for Cross-Site Request Forgery (CSRF) in Jetbrains Teamcity
CVE-2024-27199 11 exploits
CVSS 7.5 HIGH 2024-03-04FIX AVAILABLE
Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains TeamcityExploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity
CVE-2015-1313
CVSS 6.5 MEDIUM 2023-06-29FIX AVAILABLE
CVE-2024-56348 1 exploit
CVSS 4.3 MEDIUM 2024-12-20FIX AVAILABLE
Exploit for Incorrect Authorization in Jetbrains Teamcity
CVE-2014-10036
CVSS 4.3 MEDIUM 2015-01-13FIX AVAILABLE