In JetBrains TeamCity before 2024.07 an OAuth code for JetBrains Space could be stolen via Space Application connection
The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.