Skip to main content

Improper Validation of Consistency within Input

CVE-2024-31136

High
7.4/10

Summary

In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter

  • HIGH
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • NONE

CWE-1288 - Improper Validation of Consistency within Input

The product receives a complex input with multiple elements or fields that must be consistent with each other, but it does not validate or incorrectly validates that the input is actually consistent.

References

Advisory Timeline

  • Published