PT-2025-17924 · Jetbrains · Teamcity
CVE-2025-46433
·
Publicado
2025-04-25
·
Atualizado
2025-05-16
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
JetBrains TeamCity versions prior to 2025.03.1
Description
The issue is related to improper path validation in the
loggingPreset parameter. This could potentially allow for unauthorized access or manipulation of files.Recommendations
For versions prior to 2025.03.1, update to version 2025.03.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the
loggingPreset parameter to minimize the risk of exploitation.Correção
Path traversal
Relative Path Traversal
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Teamcity