All vulnerabilities

Servers and applications

CVE-2022-24340

In JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was possible.

Severity
Critical 9.8
Published
25 Feb 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2021.2.1
Sources
NVD

Affected software

SoftwareAffected versions
TeamCityServers and applications · cpe:a:jetbrains:teamcity
  • Every version before 2021.2.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-24340
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-24340