Lucene search
HistoryMay 29, 2024 - 2:15 p.m.
CVE-2024-36366
nvd
cve-2024-36366
jetbrains teamcity
xss
report grouping
filtering
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
5.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 an XSS could be executed via certain report grouping and filtering operations
Related
cve
cve
CVE-2024-36366
2024-05-29 14:15:23
cvelist
cvelist
CVE-2024-36366
2024-05-29 13:28:59
vulnrichment
vulnrichment
CVE-2024-36366
2024-05-29 13:28:59
nessus
nessus
JetBrains TeamCity Multiple Vulnerabilities
2024-05-31 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
5.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-36366