Low · 3.5 CVE-2024-43809 EUVD-2024-40460GHSA-w2ww-w274-8rxv

In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page

Published Aug 16, 2024 · Updated Aug 16, 2024 · Assigned by JetBrains

Vendor: JetBrains Product: TeamCity

Description

In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page

Affected products

Vendor	Product	Affected	Fixed
JetBrains	TeamCity	< 2024.07.1	2024.07.1

Advisories 1

WID-SEC-2024-1873 JetBrains TeamCity: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Aug 18, 2024

References

https://www.jetbrains.com/privacy-security/issues-fixed/