CVE-2024-36362: JetBrains TeamCity

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 path traversal allowing to read files from server was possible

Affected products

• JetBrains TeamCity: before 2022.04.7 (fixed in 2022.04.7); from 2022.10, before 2022.10.6 (fixed in 2022.10.6); from 2023.05, before 2023.05.6 (fixed in 2023.05.6); from 2023.11, before 2023.11.5 (fixed in 2023.11.5); from 2024.03, before 2024.03.2 (fixed in 2024.03.2)

Published 2024-05-29. Last modified 2026-06-17.