CVE-2019-15848

JetBrains TeamCity 2019.1 and 2019.1.1 allows cross-site scripting XSS, potentially making it possible to send an arbitrary HTTP request to a TeamCity server under the name of the currently logged-in user...

CVE-2019-15848

CVE-2019-15848 affects JetBrains TeamCity 2019.1 and 2019.1.1, where an XSS flaw could allow a user’s browser to send arbitrary HTTP requests to the TeamCity server under the current user’s identity. The description and related records consistently describe cross-site scripting as the issue, with...