Lucene search
JetBrainsCVE-2024-41826HistoryJul 22, 2024 - 3:15 p.m.
CVE-2024-41826
2024-07-2215:15:04
CWE-79
JetBrains
web.nvd.nist.gov
26
jetbrains
teamcity
stored xss
show connection page
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
AI Score
6
Confidence
High
EPSS
0
Percentile
14.5%
In JetBrains TeamCity before 2024.07 stored XSS was possible on Show Connection page
Affected configurations
Node
jetbrainsteamcityRange<2024.07
CNA Affected
[
{
"vendor": "JetBrains",
"product": "TeamCity",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "2024.07",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]Related
cvelist
cvelist
CVE-2024-41826
2024-07-22 14:50:22
nvd
nvd
CVE-2024-41826
2024-07-22 15:15:04
vulnrichment
vulnrichment
CVE-2024-41826
2024-07-22 14:50:22
nessus
nessus
TeamCity Server < 2024.7 Multiple Vulnerabilities
2024-07-25 00:00:00
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
AI Score
6
Confidence
High
EPSS
0
Percentile
14.5%
Related for CVE-2024-41826