In JetBrains TeamCity before 2021.1.2, email notifications could include unescaped HTML for XSS.

Published Nov 9, 2021 · Updated Aug 4, 2024 · Assigned by mitre