CVE-2022-25263: 
JetBrains TeamCity vulnerability analysis and mitigation

JetBrains TeamCity before version 2021.2.3 was identified with a critical security vulnerability (CVE-2022-25263) involving OS command injection in the Agent Push feature configuration. The vulnerability was discovered and disclosed in February 2022, affecting all previous versions of the TeamCity continuous integration server (NVD).

The vulnerability was classified as an OS command injection flaw specifically targeting the Agent Push feature configuration in TeamCity. This security issue allowed potential command injection attacks through the server's configuration interface (JetBrains Security).

The vulnerability could potentially allow attackers to execute arbitrary operating system commands through the TeamCity server's Agent Push feature, potentially compromising the entire build infrastructure and connected systems (NVD).

The vulnerability was addressed in TeamCity version 2021.2.3. Users were advised to upgrade to this version or later to protect against the OS command injection vulnerability. No alternative workarounds were provided, making the upgrade the only secure mitigation path (JetBrains Security).