CVE-2024-36378

Summary

CVE-2024-36378 is a denial-of-service (DoS) vulnerability affecting JetBrains TeamCity versions prior to 2024.03.2. Maliciously crafted authentication tokens can be used to trigger the vulnerability and cause the server to become unresponsive, resulting in a denial-of-service condition. An attacker can exploit this issue by supplying invalid tokens to the server, causing it to consume significant resources in processing the requests, ultimately leading to a degraded user experience or even server downtime. To mitigate this risk, users are advised to upgrade to TeamCity version 2024.03.2 or later as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.