CVE-2024-27199

CVE-2024-27199 is a path traversal vulnerability affecting JetBrains TeamCity versions prior to 2023.11.4, enabling unauthenticated attackers to perform limited administrative actions. With a CVSS score of 7.3 (High), this vulnerability is easily exploitable over the network without user interaction, potentially leading to compromise of confidentiality, integrity, and availability. While not yet in CISA's KEV catalog, exploit intelligence indicates public Nuclei templates exist, and the vulnerability has garnered significant community discussion and media coverage, with reports of active exploitation by threat groups like Earth Lamia.