CVE-2022-48428

JetBrains TeamCity CVE-2022-48428: vulnerable before 2022.10.3 due to stored XSS on the SSH keys page. Root cause: stored scriptable content on the SSH keys settings, enabling attacker‑supplied JavaScript in affected instances. Affected software: JetBrains TeamCity (versions prior to 2022.10.3). ...

CVE-2022-48428

In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible...