JetBrains TeamCity Cross-Site Scripting Vulnerability (CNVD-2023-62629)

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A cross-site scripting vulnerability exists in JetBrains TeamCity versions prior to 2023.05.1 due to incorrect validation of user-supplied input by the build log. An attacker could use this vulnerability to steal the victim’s cookie-based authentication credentials.