2.7
CVE-2025-68162
- EPSS 0%
- Veröffentlicht 16.12.2025 15:27:27
- Zuletzt bearbeitet 18.12.2025 19:24:08
- Quelle cve@jetbrains.com
- CVE-Watchlists
- Unerledigt
In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0% | 0 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cve@jetbrains.com | 2.7 | 1.2 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
|
CWE-829 Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.