JetBrains TeamCity before version 2023.11.4 contains a CWE-23 path traversal vulnerability (CVE-2024-27199) that enables an unauthenticated attacker to perform limited administrative actions by manipulating file paths. The vulnerability is remotely exploitable without privileges or user interaction, with a CVSS 3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). The issue was publicly disclosed in March 2024. No direct patch link is provided, but upgrading to version 2023.11.4 or later is implied to remediate the issue.

Successful exploitation could allow an attacker to perform limited administrative actions on affected TeamCity servers, potentially leading to partial compromise of confidentiality, integrity, and availability of the system. The vulnerability is remotely exploitable without authentication, increasing risk. However, no known exploits in the wild have been reported so far.

Upgrade JetBrains TeamCity to version 2023.11.4 or later, where this path traversal vulnerability is fixed. Since the product is not a cloud service, remediation requires manual patching by the user. Patch status is not explicitly confirmed by a vendor advisory link in the provided data; therefore, verify the vendor's official advisory for the latest remediation guidance.