CVE-2015-1313 Information

Description

JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced by reading HTML and JavaScript files that are returned to the web browser after an initial unauthenticated request.

Reference

https://www.jetbrains.com/teamcity/download/ https://beyondbinary.io/articles/teamcity-account-creation/

Share on: