CVE-2024-35301

—

CVSS 3.1

5.5 medium

EPSS

<1%p18

Published

May 16, 2024 (May 16, 2024)

Modified

Jun 17, 2026

Description

In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token

Vendors: jetbrains
Products: teamcity
Weakness: CWE-280
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.