CVE-2025-54531

HIGH7.7Path traversal

JSON export Create alert

Description

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows

CVSS breakdown

CVSS 3.1

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

Low

Affected products

JetBrains / TeamCity0 – 2025.07

References

MISChttps://www.jetbrains.com/privacy-security/issues-fixed/

Updated 6m ago · 8 sources