In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
https://www.hivepro.com/threat-advisory/teamcity-vulnerabilities-unleash-jasmin-ransomware-and-more/
https://therecord.media/jetbrains-rapid7-silent-patching-dispute?&web_view=true
https://www.hivepro.com/threat-digest/attacks-vulnerabilities-and-actors-4-to-10-march-2024/
https://thecyberthrone.in/2024/03/10/thecyberthrone-security-week-in-review-march-9-2024/
https://www.theregister.com/2024/03/07/teamcity_exploits_lead_to_ransomware/
https://www.theregister.com/2024/03/05/rapid7_jetbrains_vuln_disclosure_dispute/
https://securityaffairs.com/159995/security/jetbrains-teamcity-flaws.html