CVE-2020-35667

JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials.

Basic Information

CVE State
PUBLISHED
Reserved Date
December 23, 2020
Published Date
February 03, 2021
Last Updated
August 04, 2024
Vendor
n/a
Product
n/a
Description
JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials.

CVSS Scores

CVSS v3.1

7.5 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploit Status

Exploited in the Wild
Yes (2025-11-05 21:00:04 UTC) Source

Known Exploited Vulnerability Information

Source Added Date
The Shadowserver (via CIRCL) 2025-11-05 21:00:04 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel