CVE Catalog

CVE-2023-39174

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.42%

69th percentile - higher than 69% of all known CVEs

Summary

In JetBrains TeamCity versions before 2023.05.2, a ReDoS attack was possible via integration with issue trackers.

Risk Assessment

An attacker could exploit this vulnerability to slow down or block the system, potentially leading to downtime for the organization.

Recommendation

It is recommended to upgrade JetBrains TeamCity to version 2023.05.2 or later to mitigate this vulnerability.

Original NVD description (English source)

In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers

Vulnerability data from NVD (NIST) · CISA KEV · EPSS