Lucene search

[email protected]CVE-2023-38061

HistoryJul 12, 2023 - 1:15 p.m.

CVE-2023-38061

2023-07-1213:15:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-38061

jetbrains

teamcity

stored xss

vulnerability

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.2 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.0004 Low

EPSS

Percentile

13.8%

JSON

In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible

CPENameOperatorVersion
jetbrains:teamcityjetbrains teamcitylt2023.05.1
jetbrains:teamcityjetbrains teamcityeq2022.04
jetbrains:teamcityjetbrains teamcityeq2018.1.4
jetbrains:teamcityjetbrains teamcityeq8.0.5
jetbrains:teamcityjetbrains teamcityeq2022.04.1
jetbrains:teamcityjetbrains teamcityeq2017.2.4
jetbrains:teamcityjetbrains teamcityeq8.0.1
jetbrains:teamcityjetbrains teamcityeq8.1.4
jetbrains:teamcityjetbrains teamcityeq2018.2.5
jetbrains:teamcityjetbrains teamcityeq7.0

CPE	Name	Operator	Version
jetbrains:teamcity	jetbrains teamcity	lt	2023.05.1
jetbrains:teamcity	jetbrains teamcity	eq	2022.04
jetbrains:teamcity	jetbrains teamcity	eq	2018.1.4
jetbrains:teamcity	jetbrains teamcity	eq	8.0.5
jetbrains:teamcity	jetbrains teamcity	eq	2022.04.1
jetbrains:teamcity	jetbrains teamcity	eq	2017.2.4
jetbrains:teamcity	jetbrains teamcity	eq	8.0.1
jetbrains:teamcity	jetbrains teamcity	eq	8.1.4
jetbrains:teamcity	jetbrains teamcity	eq	2018.2.5
jetbrains:teamcity	jetbrains teamcity	eq	7.0

Rows per page:

1-10 of 1061

References

www.jetbrains.com/privacy-security/issues-fixed/

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.2 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.0004 Low

EPSS

Percentile

13.8%

JSON

Related for CVE-2023-38061

cvelist1 prion1 nessus1