PT-2025-38134 · Jetbrains · Teamcity

Published 2025-09-17 · Updated 2025-09-17 · CVE-2025-59456

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:P

Name of the Vulnerable Software and Affected Versions TeamCity versions prior to 2025.07.2

Description A path traversal issue existed in TeamCity during project archive upload. This allowed for potential unauthorized access or manipulation of files on the system.

Recommendations Update to version 2025.07.2 or later.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

BDU:2025-11460

CVE-2025-59456

Affected Products

Teamcity

References · 8

• https://bdu.fstec.ru/vul/2025-11460 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-59456 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59456 · Security Note
• https://t.me/CVEtracker/32735 · Telegram Post
• https://twitter.com/CVEnew/status/1968349183943033291 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1968298507397210392 · Twitter Post
• https://t.me/cveNotify/135640 · Telegram Post