In JetBrains TeamCity before 2021.1.2, permission checks in the Create Patch functionality are insufficient.
During installation, installed file permissions are set to allow anyone to modify those files.
Link | Tags |
---|---|
https://blog.jetbrains.com/blog/2021/11/08/jetbrains-security-bulletin-q3-2021/ | vendor advisory |