CVE-2024-31140: medium-severity vulnerability in JetBrains TeamCity
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A vulnerability in JetBrains TeamCity allows server administrators to delete arbitrary files from the server when installing tools. This could lead to system instability or data loss if an admin account is compromised.
CWE-1288 vulnerability in TeamCity versions prior to 2024.03 permits authenticated administrators to remove arbitrary files via the tool installation mechanism. Exploitation requires valid admin credentials and access to the tool installation feature; impact includes potential denial of service or compromise of server integrity through deletion of critical system files.
In the same product, most dangerous first.