Description
JetBrains TeamCity存在身份验证绕过漏洞，此漏洞是由于对jsp参数验证不当导致的。
JetBrains TeamCity CVE-2024-27198 身份验证绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/JetBrains%20TeamCity%20%E8%BA%AB%E4%BB%BD%E9%AA%8C%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E%20CVE-2024-27198.md
https://vulnerability.circl.lu/vuln/CVE-2024-27198
https://www.secrss.com/articles/64155
https://sites.lynu.edu.cn/xxhzx/info/1165/1393.htm
https://developer.cloud.tencent.com/tag/16429
https://www.tenablecloud.cn/plugins/nessus/191547
https://cert.360.cn/warning/detail?id=65e82cf0c09f255b91b17e65
https://www.venustech.com.cn/new_type/aqtg/20240305/27117.html
https://www.ddpoc.com/DVB-2024-6353.html