CVE-2015-1313

State: Published
Severity: Not scored
Published: Jun 29, 2023
Updated: Nov 26, 2024
Reserved: Jan 22, 2015

Description

JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML and JavaScript files that are returned to the web browser after an initial unauthenticated request.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
TeamCityJetBrains	8.0.1 to before 9.0.2Affected

References

https://www.jetbrains.com/teamcity/download/
https://beyondbinary.io/articles/teamcity-account-creation/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.