CVE:CVE-2019-12157
CNNVD:CNNVD-201910-147
Jetbrains JetBrains TeamCity是捷克JetBrains（Jetbrains）公司的一套分布式构建管理和持续集成工具。该工具提供持续单元测试、代码质量分析和构建问题分析报告等功能。
JetBrains TeamCity 2018.2.5之前版本和UpSource 2018.2 build 1293之前版本中存在输入验证错误漏洞，该漏洞源于输入验证不正确。攻击者可借助特制输入利用该漏洞在系统上执行任意命令。
solution:Upgrade jetbrains teamcity to a higher version than 2018.2.5,and avoid the version (,2018.2.5); Upgrade jetbrains upsource to a higher version than 2018.2,2018.2:build_1013,2018.2:build_1141,2018.2:build_1154,2018.2:build_1291,and avoid the version (,2018.2],2018.2:build_1013,2018.2:build_1141,2018.2:build_1154,2018.2:build_1291