CVE-2024-28174CWE-863

In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized improperly

Medium · published March 6, 2024

CVSS v3.1
5.8
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized improperly

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00336 · 25.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-03-06T16:52Z
EPSS history
Timeline
  • 06 MAR 16:52Z
    In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized improperly
    cvelistv5