CVE-2023-50870

In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible
References
Link Resource
https://www.jetbrains.com/privacy-security/issues-fixed/ Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*

History

19 Dec 2023, 18:48

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.8
First Time Jetbrains
Jetbrains teamcity
CWE CWE-352
CPE cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*
References () https://www.jetbrains.com/privacy-security/issues-fixed/ - () https://www.jetbrains.com/privacy-security/issues-fixed/ - Issue Tracking, Vendor Advisory

15 Dec 2023, 15:26

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-15 14:15

Updated : 2024-02-28 20:54


NVD link : CVE-2023-50870

Mitre link : CVE-2023-50870

CVE.ORG link : CVE-2023-50870


JSON object : View

Products Affected

jetbrains

  • teamcity
CWE
CWE-352

Cross-Site Request Forgery (CSRF)