ID:5816 - Exploit for Input validation error in TeamCity - CVE-2019-15039

 
Main Vulnerability Database Exploits ID:5816 - Exploit for Input validation error in TeamCity - CVE-2019-15039

ID:5816 - Exploit for Input validation error in TeamCity - CVE-2019-15039

Published: June 17, 2021


Vulnerability identifier: #VU35205
Vulnerability risk: High
CVE-ID: CVE-2019-15039
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
TeamCity

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed in TeamCity 2019.1.


Remediation

Install update from vendor's website.