CVE-2024-27199

Deeper analysis

CVE-2024-27199 is a path traversal vulnerability, tracked under CWE-23 and CWE-22, that affects JetBrains TeamCity versions prior to 2023.11.4. The flaw permits unauthorized access to perform a limited set of administrative actions on the server. It carries a CVSS 3.1 base score of 7.3, reflecting network attack vector, low complexity, and no required authentication or user interaction.

Unauthenticated remote attackers can exploit the issue over the network to conduct limited administrative operations that would normally require elevated privileges. Successful exploitation can lead to partial compromise of confidentiality, integrity, and availability within the TeamCity instance.

JetBrains has addressed the vulnerability in TeamCity 2023.11.4 and later releases, as documented on its official security issues page. Administrators are advised to apply the available updates promptly to eliminate the path traversal vector.

Public reporting indicates active mass exploitation of the flaw in the wild, with threat actors creating rogue administrative accounts. The associated EPSS score has reached a peak of 0.9449 and currently stands at 0.9093, while proof-of-concept code has been published on GitHub.