1. Home
  2. CVE Database
  3. CVE-2024-56356
MEDIUM · 5.9

CVE-2024-56356

In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack

Vulnerability Description

In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
JetbrainsTeamcity< 2024.12

Related Weaknesses (CWE)

CWE-611

References

FAQ

What is CVE-2024-56356?

CVE-2024-56356 is a vulnerability with a CVSS score of 5.9 (MEDIUM). In JetBrains TeamCity before 2024.12 insecure XMLParser configuration could lead to potential XXE attack

How severe is CVE-2024-56356?

CVE-2024-56356 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-56356?

Check the references section above for vendor advisories and patch information. Affected products include: Jetbrains Teamcity.