CVE-2024-31135

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

In JetBrains TeamCity before 2024.03 open redirect was possible on the login page

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

No affected versions have been published.

Timeline

Published
Mar 28, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-311367.4In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameterCVE-2024-311376.1In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configurationCVE-2024-311385.4In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settingsCVE-2024-311398.1In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detectorCVE-2024-31146.5An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to CVE-2024-311404.9In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing toolsCVE-2024-311416.5Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka ClieCVE-2024-311427.5Because of a logical error in XSA-407 (Branch Type Confusion), the mitigation is not applied properly when it is intended to be used. XSA-43CVE-2024-311437.5An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, tCVE-2024-311443.8For a brief summary of Xapi terminology, see: https://xapi-project.github.io/xen-api/overview.html#object-model-overview Xapi containsCVE-2024-311457.5Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for IntelCVE-2024-311467.5When multiple devices share resources and one of them is to be passed through to a guest, security of the entire system and of respective gu
CVE-2024-31135: Medium severity, CVSS 6.1 | Vulnix