JetBrains TeamCity < 2023.05.6 / 2023.06.x < 2023.11.5 XSS (CVE-2024-36371)

The version of JetBrains TeamCity installed on the remote host is prior to 2023.05.6, or prior to 2023.11.5. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2023.05.6, 2023.11.5 stored XSS in Commit status publisher was possible CVE-2024-36371 Note that Nessus has no...

CVE-2024-36371

JetBrains TeamCity versions prior to 2023.05.6 and 2023.11.5 are affected by a stored cross-site scripting (XSS) vulnerability in the Commit status publisher, caused by insufficient filtering/escaping of user-provided data. An attacker could inject arbitrary script or HTML via the publisher, pote...