CVE-2022-25263 - JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration

CRITICAL

JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration

Published Feb 25, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 2.03%

JetBrains TeamCity before 2021.2.3 was vulnerable to OS command injection in the Agent Push feature configuration.

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

Link	Providers	Tags
https://blog.jetbrains.com		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-29960		Advisory
https://www.jetbrains.com/privacy-security/issues-fixed/		x_refsource_MISCVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 25, 2022

Updated Aug 3, 2024

Reserved Feb 16, 2022

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Feb 25, 2022

Updated Aug 3, 2024

GitHub

No data