Medium · 6.8 CVE-2024-31137 EUVD-2024-29048GHSA-8h97-3wj9-m4mh

In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration

Published Mar 28, 2024 · Updated Aug 2, 2024 · Assigned by JetBrains

Vendor: JetBrains Product: TeamCity

Description

In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration

Affected products

Vendor	Product	Affected	Fixed
JetBrains	TeamCity	< 2024.03	2024.03

Advisories 2

WID-SEC-2024-0756 JetBrains TeamCity: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 27, 2024
WID-SEC-2024-1254 JetBrains TeamCity: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 30, 2024

References

https://www.jetbrains.com/privacy-security/issues-fixed/