JetBrains TeamCity 0.0.x < 2023.05.6 / 2023.6.x < 2023.11.5 (CVE-2024-36371)

The version of JetBrains TeamCity installed on the remote host is prior to 2023.05.6 or 2023.11.5. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-36371 advisory. - In JetBrains TeamCity before 2023.05.5, 2023.11.5 stored XSS in Commit status publisher was possible...

CVE-2024-36371

JetBrains TeamCity versions prior to 2023.05.6 and 2023.11.5 are affected by a stored cross-site scripting (XSS) vulnerability in the Commit status publisher, caused by insufficient filtering/escaping of user-provided data. An attacker could inject arbitrary script or HTML via the publisher, pote...