In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server
In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- JetBrains
- Product
- TeamCity / IDEs, Java libraries / app servers
- CVSS
- 6.5
- Exposure class
- Developer platform, Web platform
Why it ranks 8 (Routine)
- CVSS 6.5 medium
- Product class: developer platform, web platform
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.