CVE-2022-48427

JetBrains TeamCity versions prior to 2022.10.3 are affected by CVE-2022-48427 due to a stored XSS flaw on the Pending changes and Changes tabs. The issue affects JetBrains TeamCity server deployments and is triggered by input that is not properly sanitized, allowing an attacker to inject script t...

CVE-2022-48427: Improper Neutralization of Input During Web Page Generation

In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible...

PT-2023-15771 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2022.10.3 Description: The issue allows for stored XSS on the “Pending changes” and “Changes” tabs. Recommendations: For versions prior to 2022.10.3, update to version 2022.10.3 or later to resolve the iss...