PT-2024-3961 · Jetbrains · Jetbrains Teamcity+1

Published

2024-05-29

·

Updated

2026-03-02

·

CVE-2024-36370

CVSS v2.0

5.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2022.04.7 JetBrains TeamCity versions prior to 2022.10.6 JetBrains TeamCity versions prior to 2023.05.6 JetBrains TeamCity versions prior to 2023.11.5
Description The issue is related to a stored XSS vulnerability via OAuth connection settings in JetBrains TeamCity. This vulnerability can be exploited by a remote attacker to conduct cross-site scripting attacks, potentially allowing them to access sensitive information or perform unauthorized actions.
Recommendations For versions prior to 2022.04.7, update to version 2022.04.7 or later. For versions prior to 2022.10.6, update to version 2022.10.6 or later. For versions prior to 2023.05.6, update to version 2023.05.6 or later. For versions prior to 2023.11.5, update to version 2023.11.5 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2024-04375
CVE-2024-36370

Affected Products

Jetbrains Teamcity
Teamcity