CVE-2024-36362

Summary

CVE-2024-36362 is a new vulnerability affecting JetBrains TeamCity before versions 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, and 2024.03.2. This issue allows an attacker to perform path traversal and access files from the server, potentially leading to confidential data disclosure. The vulnerability can be exploited by manipulating input fields to navigate outside the intended directory structure. JetBrains has released patches to address this issue; it is recommended that users update their TeamCity installations as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.