CVE-2024-36375 MEDIUM

CVE-2024-36375

Vendor Jetbrains

Product TeamCity

Weakness CWE-209 · Error message info leak

Published May 29, 2024

Last update September 3, 2024

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

In JetBrains TeamCity before 2024.03.2 technical information regarding TeamCity server could be exposed

Key dates

02Disclosure timeline

May 29, 2024 CVE published

September 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-36375 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/209.html

Related vulnerabilities

04Related CVE

CVE-2025-24552 WordPress Paytium plugin <= 4.4.11 - Full Path Disclosure (FPD) vulnerability CVE-2023-29193 SpiceDB binding metrics port to untrusted networks and can leak command-line flags CVE-2025-32238 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability CVE-2024-28765 Security vulnerability was found in IBM Security Directory Integrator CVE-2026-33065 free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request