In JetBrains TeamCity prior to 2023.05 improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API
jetbrains teamcity