JetBrains TeamCity XML External Entity Handling Vulnerability

JetBrains TeamCity is a distributed build management and continuous integration tool from JetBrains Czech Republic. The tool provides continuous unit testing, code quality analysis, and build issue analysis reporting.A security vulnerability exists in JetBrains TeamCity, which stems from the product’s failure to properly parse configuration files. An attacker could use this vulnerability to read arbitrary files, cause a denial of service, perform an SSRF attack, perform a port scan from the perspective of the machine on which the parser resides, or achieve other system impact.