CVE-2022-24335: JetBrains TeamCity

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race-condition attack in agent registration via XML-RPC.

Affected products

• JetBrains TeamCity: before 2021.2.1 (fixed in 2021.2.1)

Published 2022-02-25. Last modified 2026-06-17.