CVE-2025-46433

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Apr 25, 2025

Updated: Apr 29, 2025

CWE ID 23

Summary

CVE-2025-46433 is a vulnerability affecting JetBrains TeamCity versions prior to 2025.03.1. This issue stems from improper path validation in the loggingPreset parameter, allowing an attacker to potentially execute malicious code by manipulating the logging configuration. This could lead to unauthorized system access, data leakage, or even complete system compromise. TeamCity users are advised to upgrade to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

TeamCity

Affected Vendors

JetBrains

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/5fPxE2
https://www.cve.org/CVERecord?id=CVE-2025-46433
https://nvd.nist.gov/vuln/detail/CVE-2025-46433

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

DRAT V2: Updated DRAT Emerges in TAG-140’s Arsenal

Threats to the 2025 NATO Summit

Artificial Eyes: Generative AI in China’s Military Intelligence

Know What Matters

For Customers

For Partners