CVE Catalog
CVE-2023-34219
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.35%
27th percentile - higher than 27% of all known CVEs
Summary
In JetBrains TeamCity versions before 2023.05, improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API.
Risk Assessment
The organization may be exposed to unauthorized changes in build configuration, potentially leading to unforeseen software quality and security issues.
Recommendation
It is recommended to upgrade to version 2023.05 or later and review user permissions for REST API access.
Original NVD description (English source)
In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API