CVE-2024-47948: 
JetBrains TeamCity vulnerability analysis and mitigation

A path traversal vulnerability was discovered in JetBrains TeamCity versions prior to 2024.07.3, which could lead to information disclosure through server backups. The vulnerability was disclosed on October 8, 2024, and received a CVSS v3.1 base score of 7.5 (HIGH) from NIST (NVD).

The vulnerability is classified as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) by NIST and CWE-23 (Relative Path Traversal) by JetBrains. The CVSS v3.1 vector string is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating that the vulnerability can be exploited over the network with low attack complexity, requires no privileges or user interaction, and can result in high confidentiality impact (NVD).

The vulnerability allows unauthorized access to sensitive information through server backups. The high confidentiality impact rating suggests that the exposed information could be critical to system security or contain sensitive data (NVD).

The vulnerability has been fixed in JetBrains TeamCity version 2024.07.3. Users are advised to upgrade to this version or later to mitigate the risk (JetBrains Advisory).