PT-2021-19589 · Jetbrains · Teamcity

Chris Moore · Published 2021-05-07 · Updated 2021-05-17 · CVE-2021-31913

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2020.2.3

Description: The issue is related to insufficient checks of the redirect uri during GitHub SSO token exchange. This could potentially lead to security issues, but specific details about the estimated number of affected devices or real-world incidents are not provided.

Recommendations: For versions prior to 2020.2.3, update to version 2020.2.3 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-354

Related Identifiers

CVE-2021-31913

Affected Products

Teamcity

References · 5

• https://osv.dev/vulnerability/CVE-2021-31913 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31913 · Security Note
• https://blog.jetbrains.com · Vendor Advisory
• https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021 · Vendor Advisory
• https://t.me/cvenotify/14530 · Telegram Post