CVE-2024-35300: Improper Neutralization of Input During Web Page Generation

In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible...

PT-2024-3700 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions 2024.03 through 2024.03.1 Description: The issue exists due to inadequate protection of the web page structure in the CI/CD system, allowing a remote attacker to conduct a cross-site scripting XSS attack. Several...