Volerion logoVolerion
Volerion logoVolerion

JetBrains TeamCity Password Reset and Email Verification Token Weak Hashing Vulnerability

Vulnerability

A vulnerability exists in JetBrains TeamCity in versions prior to 2025.07, where password reset and email verification tokens were generated using weak hashing algorithms. This flaw could potentially be exploited to compromise the integrity of the token-based verification process.

Impact

The vulnerability could lead to unauthorized access or manipulation of user accounts by exploiting the weak hashing of password reset and email verification tokens.

Remediation

Users can update to JetBrains TeamCity version 2025.07 or later, where this vulnerability has been addressed.

Added: Jul 28, 2025, 5:27 PM
Updated: Jul 28, 2025, 5:27 PM

Vulnerability Rating

Custom Algorithm
spread
5.0
impact
2.5
exploitability
6.6
remediation
7.7
relevance
0.3
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.