CVE-2025-67740CWE-863broken-access-control

CVE-2025-67740

Low · published December 11, 2025

CVSS v3.1
2.7
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.9th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-12-11T21:16Z
Affected products (1)
ProductVersionsFixed in
jetbrains/teamcity< 2025.112025.11
References (1)
https://www.jetbrains.com/privacy-security/issues-fixed/ · [email protected]
EPSS history
Timeline
  • 11 DEC 15:19Z
    In JetBrains TeamCity before 2025.11 improper access control could expose GitHub App token's metadata
    cvelistv5