In JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a password reset.
mitre·CWE-640·Published 2021-05-11