CVE-2021-25772: 
JetBrains TeamCity vulnerability analysis and mitigation

In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration (JetBrains Bulletin, NVD). The vulnerability was assigned CVE-2021-25772 and was disclosed in February 2021.

The vulnerability has been assigned a CVSS v3.1 base score of 5.3 (MEDIUM) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L, indicating it is a network-accessible vulnerability with low attack complexity, requiring no privileges or user interaction (NVD).

The vulnerability affects the availability of the TeamCity server through a potential Denial of Service (DoS) attack via server integration. The impact is considered low severity as it only affects availability without compromising confidentiality or integrity (JetBrains Bulletin).

The vulnerability is remotely exploitable and requires no authentication or special privileges to execute. However, specific details about exploitation methods are not publicly disclosed (NVD).

The vulnerability was fixed in TeamCity version 2020.2.2. Users should upgrade to this version or later to mitigate the risk (JetBrains Bulletin).