Medium · 5.4 CVE-2024-35302 EUVD-2024-35273GHSA-7mq3-wxp6-f755

In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possible

Published May 16, 2024 · Updated Aug 2, 2024 · Assigned by JetBrains

Vendor: JetBrains Product: TeamCity

Description

In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possible

Affected products

Vendor	Product	Affected	Fixed
JetBrains	TeamCity	< 2023.11	2023.11

Advisories 2

WID-SEC-2024-1254 JetBrains TeamCity: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 30, 2024
WID-SEC-2024-1168 JetBrains TeamCity: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 15, 2024

References

https://www.jetbrains.com/privacy-security/issues-fixed/