CNNVD-202512-2870 Information

CNNVD ID

CNNVD-202512-2870

CVE-2025-68162

  • CNNVD Published: 2025-12-16

Description (Chinese)

JetBrains TeamCity是捷克JetBrains公司的一套分布式构建管理和持续集成工具。该工具提供持续单元测试、代码质量分析和构建问题分析报告等功能。 JetBrains TeamCity 2025.11之前版本存在安全漏洞,该漏洞源于maven embedder允许通过项目配置加载扩展。

Description (English)

Jetbrains TeamCity is a distributed set of building management and continuous integration tools for Czech Jetbrains. The tool provides continuous modular testing, code quality analysis and construction analysis. There was a security loophole in Jetbrains TeamCity 2025.11, which originated from the fact that the project was allowed to be loaded by project configuration.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

JetBrains

Published

2025-12-16

Last Modified

2026-02-24

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Patch

https://www.jetbrains.com/privacy-security/issues-fixed/

Share on: