Medium · 4.6 CVE-2024-43810 EUVD-2024-40461GHSA-wm2h-r2j5-8pjc

In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin

Published Aug 16, 2024 · Updated Aug 16, 2024 · Assigned by JetBrains

Vendor: JetBrains Product: TeamCity

Description

In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin

Affected products

Vendor	Product	Affected	Fixed
JetBrains	TeamCity	< 2024.07.1	2024.07.1

Advisories 1

WID-SEC-2024-1873 JetBrains TeamCity: Mehrere Schwachstellen ermöglichen Cross-Site Scripting BSI CERT-Bund (WID) · Aug 18, 2024

References

https://www.jetbrains.com/privacy-security/issues-fixed/