Intel Chain

PRIORITY: HIGH. JetBrains TeamCity instances running affected versions are exposed to CVE-2024-27199, a relative path traversal flaw permitting authenticated threat actors with limited administrative privileges to execute unauthorized administrative functions through crafted file path manipulation. Exploitation requires valid credentials but bypasses intended access controls within the TeamCity platform. CISA has flagged this vulnerability as actively exploited in the wild as of March 2024. Immediate patching of TeamCity deployments to patched versions 2023.11.4 or 2024.03.3 and later is required to mitigate compromise risk.