In JetBrains TeamCity before 2021.2.1, XXE during the parsing of the configuration file was possible.

Published Feb 25, 2022 · Updated Aug 3, 2024 · Assigned by mitre