CVE-2024-35301CWE-280

In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token

Medium · published May 16, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.5th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2024-05-16T10:32Z
EPSS history
Timeline
  • 16 MAY 10:32Z
    In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token
    cvelistv5