Skip to content
OpenAdvisories
Medium · 4.6 CVE-2023-38066 EUVD-2023-41892GHSA-7p2x-wj65-m3vc

In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads

Published Jul 12, 2023 · Updated Oct 21, 2024 · Assigned by JetBrains

Description

In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads

Affected products

VendorProductAffectedFixed
JetBrains TeamCity < 2023.05.1 2023.05.1

References