In JetBrains TeamCity before version 2025.07.1, sMTP injection was possible, allowing for the modification of email content. This vulnerability could lead to unauthorized changes in email communications, potentially impacting users’ trust and data integrity. It is crucial for users to update to the latest version to mitigate this risk.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-57733 |
Exploitation
To exploit this vulnerability, an attacker would need to have high privileges within the JetBrains TeamCity environment. By leveraging the sMTP injection flaw, the attacker could craft malicious email content that could be sent to users, potentially leading to further exploitation or misinformation.
Affected Products
- JetBrains TeamCity: A continuous integration and deployment server that allows teams to automate their build, test, and release processes.
Mitigation
To mitigate this vulnerability, it is recommended that users upgrade to JetBrains TeamCity version 2025.07.1 or later. Additionally, reviewing email configurations and ensuring that proper security measures are in place can help prevent potential exploitation.