CVE-2024-36470: JetBrains TeamCity

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases

Affected products

• JetBrains TeamCity: before 2022.04.7 (fixed in 2022.04.7); from 2022.10, before 2022.10.6 (fixed in 2022.10.6); from 2023.05, before 2023.05.6 (fixed in 2023.05.6); from 2023.11, before 2023.11.5 (fixed in 2023.11.5)

Published 2024-05-29. Last modified 2026-06-17.