First published: Wed Jul 20 2022(Updated: )
In JetBrains TeamCity before 2022.04.2 build parameter injection was possible
Credit: security@jetbrains.com
Affected Software | Affected Version | How to fix |
---|---|---|
JetBrains TeamCity | <2022.04.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-36322 is a vulnerability in JetBrains TeamCity that allows build parameter injection.
CVE-2022-36322 has a severity rating of 8.8 (high).
CVE-2022-36322 affects JetBrains TeamCity versions up to and exclusive of 2022.04.2.
Yes, updating to JetBrains TeamCity version 2022.04.2 or later fixes CVE-2022-36322.
You can find more information about CVE-2022-36322 at the JetBrains website: [https://www.jetbrains.com/privacy-security/issues-fixed/]