CVE-2025-59457CWE-183

In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows

High · published September 17, 2025

CVSS v3.1
7.7
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00832 · 57.2th percentile
Weakness
CWE-183 · Permissive List of Allowed Inputs
Published
2025-09-17T09:04Z
EPSS history
Timeline
  • 17 SEP 09:04Z
    In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows
    cvelistv5