CVE-2022-48342

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1188

Affected software

VendorProductVersions
JetBrainsTeamCity< 2022.10.2

References

Timeline

Published
Feb 23, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-483436.1In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.CVE-2022-483446.1In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process.CVE-2022-483456.1sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.CVE-2022-483467.5The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality.CVE-2022-483477.5The MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect confidentiCVE-2022-483489.1The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiaCVE-2022-483499.1The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availabilitCVE-2022-48355.4The Social Sharing Toolkit WordPress plugin through 2.6 does not validate and escape some of its shortcode attributes before outputting themCVE-2022-483507.5The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentCVE-2022-483517.5The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.CVE-2022-483527.5Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic.CVE-2022-483539.8Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which resul
CVE-2022-48342: Critical severity, CVSS 9.8 | Vulnix