CVE-2024-31140
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Published Mar 28, 2024
Updated: Dec 16, 2024
CWE ID 1288
Summary
CVE-2024-31140 is a newly disclosed vulnerability in JetBrains TeamCity. This issue allows server administrators to potentially remove arbitrary files by installing custom tools on the affected system, prior to version 2024.03. This vulnerability poses a significant risk, as unauthorized file deletion could lead to data loss or system instability, and is a call to action for TeamCity users to promptly update to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- TeamCity
Affected Vendors
- JetBrains